IBM Langflow OSS versions 1.0.0 through 1.12.3 contain an improper neutralization of special elements used in code that, for remote authenticated attackers, allows arbitrary code execution. This flaw is identified as CWE-94, a code injection weakness that can compromise the confidentiality, integrity, and availability of the affected system, potentially giving attackers full control over the host if they can authenticate.

The vulnerability affects IBM Langflow OSS. All releases from version 1.0.0 up to and including 1.12.3 are impacted. The affected product is a web application that processes user‑provided code fragments, and the vulnerability requires valid credentials to the application.

The CVSS score of 8.8 classifies this issue as high severity, indicating a substantial risk of exploitation when an attacker has authenticated access. The EPSS score is not available, so the current exploitation probability is unclear, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, leveraging authenticated access; once credentials are obtained, the attacker can inject code that the application fails to neutralize, leading to unrestricted code execution on the host. Because the flaw resides in the core code handling, exploitation may be straightforward for a skilled adversary who can craft malicious payloads.