CVE-2026-6543Disclosure(langflow / langflow_desktop)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.

langflow CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.ibm.com/support/pages/node/7271092

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

langflow_desktop

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-04-30); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

langflow

Products

langflow_desktop

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-30	4	Disclosure4
2026-05-08	1	General1

Full discourse5 posts

Kaitan ID Security@KaitanSecurity161d
Disclosure
⚠️ HIGH — CVE-2026-6543 IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges … CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6543 #IBM #CyberSecurity #InfoSec
Post summary
CVE‑2026‑6543 is disclosed for IBM Langflow Desktop, allowing arbitrary command execution with a CVSS score of 8.8.
0001030
460 followersView on X
IntegSec@integ_sec153d
General
CVE-2026-6543: IBM Langflow Desktop Code Injection Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04fZ6Qj0
Post summary
The article announces a code injection vulnerability (CVE‑2026‑6543) in IBM Langflow Desktop and offers general guidance on business impact and response.
0000022
30 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds161d
Disclosure
CVE-2026-6543 Remote Code Execution in IBM Langflow Desktop 1.0.0 Through 1.8.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6543
Post summary
The text announces CVE-2026-6543 as a remote code execution flaw affecting IBM Langflow Desktop versions 1.0.0–1.8.4, providing a link for further details.
0000033
4.0K followersView on X
Infoflowcloud@infoflowcloud161d
Disclosure
🚨*CVE* CVE-2026-6543 IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows read… https://www.cve.org/CVERecord?id=CVE-2026-6543 ----- Traducción: CVE-2026-6543 IBM… http://infoflow.cloud`
Post summary
The post announces CVE-2026-6543, detailing that IBM Langflow Desktop versions 1.0.0 to 1.8.4 permit arbitrary command execution (RCE) with process privileges, but it lacks PoC, exploit code, patch, or exploitation reports.
0000017
75 followersView on X
CVE@CVEnew161d
Disclosure
CVE-2026-6543 IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows read… https://www.cve.org/CVERecord?id=CVE-2026-6543
Post summary
The snippet is a brief disclosure of CVE-2026-6543, noting that IBM Langflow Desktop allows arbitrary command execution, without mentioning a PoC, exploit tool, active exploitation, or patch.
00000118
57.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	langflow	langflow_desktop	-	-	-

Explore more

Back to dashboard langflow CVEs langflow_desktop vulnerabilities

What researchers are saying

CVE-2026-6543

Kaitan ID Security[verified]@KaitanSecurityDisclosure

CVE‑2026‑6543 is disclosed for IBM Langflow Desktop, allowing arbitrary command execution with a CVSS score of 8.8.

IntegSec[verified]@integ_secGeneral

The article announces a code injection vulnerability (CVE‑2026‑6543) in IBM Langflow Desktop and offers general guidance on business impact and response.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2026-6543 as a remote code execution flaw affecting IBM Langflow Desktop versions 1.0.0–1.8.4, providing a link for further details.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-6543, detailing that IBM Langflow Desktop versions 1.0.0 to 1.8.4 permit arbitrary command execution (RCE) with process privileges, but it lacks PoC, exploit code, patch, or exploitation reports.

CVE@CVEnewDisclosure

The snippet is a brief disclosure of CVE-2026-6543, noting that IBM Langflow Desktop allows arbitrary command execution, without mentioning a PoC, exploit tool, active exploitation, or patch.