The flaw is an insecure code validation endpoint that allows a user to run arbitrary system commands with the privileges of the Langflow Desktop process. By executing commands with the process’s privileges, an attacker can read sensitive environment variables such as API keys and database credentials, modify files, or launch further attacks on the internal network. The vulnerability corresponds to CWE‑94 Injection in an eval‑like context.

IBM Langflow Desktop versions 1.0.0 through 1.8.4 are affected. The bug was removed in version 1.9.0 and later.

The CVSS score of 8.8 indicates high severity. The EPSS score is reported as < 1%, suggesting a very low but nonzero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. If a user can invoke the vulnerable endpoint, the attacker gains full command‑execution rights on the host, enabling data exfiltration, lateral movement, or further compromise of the internal network.