This vulnerability exists in langflow-ai langflow up to version 1.8.4 within the CodeParser.parse_callable_details function of the Full Builtins Module Handler. An attacker can remotely manipulate inputs to trigger command injection, potentially executing arbitrary commands on the affected system. The vulnerability is publicly disclosed, and no official remediation or patch has been provided by the vendor. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability.

Successful exploitation allows remote command injection, which could lead to unauthorized command execution on the affected system. However, the overall impact is rated medium due to low confidentiality, integrity, and availability impacts as per the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider applying workarounds such as restricting network access to the vulnerable component or disabling the affected functionality if possible until an official patch is released.