CVE-2026-6543
Last modified
CVE-2026-6543 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Langflow | Langflow Desktop | >= 1.0.0, <= 1.8.4 |
References
- https://www.ibm.com/support/pages/node/7271092Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-6543?
How severe is CVE-2026-6543?
How do I fix CVE-2026-6543?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-6540Calico's Application Layer Policy (disabled by default), whi…7.5
- CVE-2026-65400An authentication issue was addressed with improved state ma…7.1
- CVE-2026-6541Mattermost versions 11.7.x <= 11.7.1, 11.6.x <= 11.6.4, 10.1…4.3
- CVE-2026-6542IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to…8.1
- CVE-2026-65421The MMS BER decoder contains a flaw in decoding fixed-width …7.1
- CVE-2026-65423An integer overflow in the UA_Variant arrayDimensions produc…8.8
- CVE-2026-65430Joomla Extension - regularlabs.com - MaxMind Credential leak…7.5
- CVE-2026-65431Joomla Extension - regularlabs.com - Zipslip in GeoIP extens…9.8
- CVE-2026-65432Apache CXF reads a top-level WSDL through its hardened StaxU…7.5
- CVE-2026-65433Subscriber Broken Access Control in RT Mega Menu – Mega Menu…6.5
- CVE-2026-65434Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce…6.5
- CVE-2026-65435Unauthenticated Broken Access Control in Thrive Leads Versio…6.5
Are you affected by CVE-2026-6543?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST