CVE-2026-6543

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6543", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-04-17T18:06:13.865Z", "datePublished": "2026-04-30T21:11:54.483Z", "dateUpdated": "2026-05-02T03:55:24.549Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-30T21:11:54.483Z"}, "title": "Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.0.0", "lessThanOrEqual": "1.8.4", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.4:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7271092", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.9.0 or newer https://www.langflow.org/blog/langflow-1-8-desktopIf you are already using Langflow Desktop, upgrade in the application to version 1.9.0To install Langflow Desktop for the first time, visit Download Langflow Desktop.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.9.0 or newer <a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.9.0</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}, "credits": [{"lang": "en", "value": "Eran Shimony (Palo Alto Networks)", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-01T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-6543"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-02T03:55:24.549Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6543", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-01T13:59:27.367872Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-01T13:59:30.788Z"}}], "cna": {"title": "Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint", "credits": [{"lang": "en", "type": "finder", "value": "Eran Shimony (Palo Alto Networks)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.0.0", "versionType": "semver", "lessThanOrEqual": "1.8.4"}]}], "solutions": [{"lang": "en", "value": "IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.9.0 or newer https://www.langflow.org/blog/langflow-1-8-desktopIf you are already using Langflow Desktop, upgrade in the application to version 1.9.0To install Langflow Desktop for the first time, visit Download Langflow Desktop.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.9.0 or newer <a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.9.0</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7271092", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-30T21:11:54.483Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6543", "state": "PUBLISHED", "dateUpdated": "2026-05-02T03:55:24.549Z", "dateReserved": "2026-04-17T18:06:13.865Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-04-30T21:11:54.483Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.4:*:*:*:*:*:*:*"], "product": "Langflow Desktop", "vendor": "IBM", "versions": [{"lessThanOrEqual": "1.8.4", "status": "affected", "version": "1.0.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow_desktop:*:*:*:*:*:*:*:*", "matchCriteriaId": "83CB6A3F-0146-4A7A-9FDF-7F49CCBBC143", "versionEndIncluding": "1.8.4", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network."}, {"lang": "es", "value": "IBM Langflow Desktop 1.0.0 hasta 1.8.4 Langflow permite a un atacante ejecutar comandos arbitrarios con los privilegios del proceso que ejecuta Langflow. Esto permite leer variables de entorno sensibles (claves de API, credenciales de base de datos), modificar archivos o lanzar ataques adicionales en la red interna."}], "id": "CVE-2026-6543", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6543", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-01T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-04-30T22:16:26.467", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7271092"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.8.4]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Langflow Desktop", "source": "cna", "vendor": "IBM"}, "product": "langflow_desktop", "vendor": "ibm"}], "created": "2026-04-30T23:00:04.342136+00:00", "updated": "2026-05-02T11:00:06.774845+00:00", "vendors": ["ibm", "ibm$PRODUCT$langflow_desktop"]}