VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 30, 2026· Updated May 11, 2026

CVE-2026-6543

CVE-2026-6543

Description

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Langflow AI/Langflow Desktop2 versions
    cpe:2.3:a:langflow:langflow_desktop:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:langflow:langflow_desktop:*:*:*:*:*:*:*:*range: >=1.0.0,<=1.8.4
    • (no CPE)range: 1.0.0 through 1.8.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.