The vulnerability in IBM Langflow OSS results from improper isolation of Python execution combined with an authentication bypass. An unauthenticated attacker can supply malicious code to the Python REPL component, leading the system to execute it with host privileges. This flaw is an instance of code injection (CWE‑94) and can be leveraged for complete system compromise.

Affected systems include IBM Langflow OSS releases from 1.0.0 through 1.9.3. All users operating those versions are susceptible, regardless of deployment environment, as the flaw requires no additional privileges beyond network reach to the vulnerable component.

The CVSS score of 10 reflects a critical severity, while the EPSS score is not available. The vulnerability is not currently listed in the CISA KEV catalog. Attackers need only unauthenticated network access to the exposed Python REPL endpoint; no further preparation is required, making exploitation straightforward.