This vulnerability exists in langflow-ai langflow up to version 1.8.4 within the CodeParser.parse_callable_details function located in src/lfx/src/lfx/custom/code_parser/code_parser.py. It allows remote command injection through crafted input manipulation. The issue impacts the Full Builtins Module Handler component. The vendor was notified but did not respond, and no official patch or remediation guidance is currently available. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed.

Successful exploitation can lead to remote command execution on the affected system, potentially allowing attackers to run arbitrary commands with the privileges of the vulnerable application. This could lead to unauthorized system access or control. However, there is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider applying workarounds such as restricting access to the vulnerable function or isolating the application environment until a patch is released. Monitor official channels for updates from the vendor.