IBM Langflow Desktop versions 1.0.0 through 1.8.4 contain a vulnerability that allows an attacker to execute arbitrary commands with the privileges of the Langflow process. This can lead to unauthorized reading of sensitive environment variables such as API keys and database credentials, modification of files, and potential further attacks on the internal network.