Skip to content
OpenAdvisories

Product · IBM

Langflow Desktop

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-6543

    Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

    IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launchi…

    IBM Langflow Desktop
  • High 7.5
    CVE-2026-4503

    Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint

    IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.

    IBM Langflow Desktop
  • High 8.8
    CVE-2026-3357

    IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file

    IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.

    IBM Langflow Desktop