IBM Langflow Desktop versions 1.0.0 through 1.8.4 contain a CWE-94 Improper Control of Generation of Code ('Code Injection') vulnerability. This flaw permits an attacker to execute arbitrary commands with the privileges of the Langflow process. The vulnerability can be exploited to access sensitive environment variables, alter files, or perform additional attacks on internal systems. The CVSS v3.1 base score is 8.8, indicating high severity, with network attack vector, low attack complexity, and no user interaction required. The vendor has not provided an official fix or remediation level, and the product is not a cloud service.

Successful exploitation allows an attacker with local privileges to execute arbitrary code with the same privileges as the Langflow Desktop process. This can lead to disclosure of sensitive information such as API keys and database credentials, unauthorized file modifications, and further attacks on internal network resources. The vulnerability poses a high risk to confidentiality, integrity, and availability of affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available from IBM, users should consider restricting access to Langflow Desktop processes and environments, and monitor for suspicious activity. Avoid running Langflow Desktop with elevated privileges until a patch is released.