IBM Langflow Desktop versions 1.0.0 through 1.8.4 contain a CWE-94 Improper Control of Generation of Code vulnerability that permits an attacker to execute arbitrary commands with the privileges of the Langflow process. This vulnerability allows unauthorized code execution leading to potential disclosure of sensitive environment variables, file modifications, and lateral movement within the internal network. The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No official fix or patch has been documented as of the published date.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. Attackers can read sensitive environment variables such as API keys and database credentials, modify files, and potentially use the compromised host as a pivot point for further attacks on the internal network. The vulnerability requires local privileges but no user interaction, increasing the risk if an attacker gains initial access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to systems running IBM Langflow Desktop to trusted users only and monitor for suspicious activity. Avoid running Langflow Desktop with elevated privileges where possible to limit the impact of exploitation.