The vulnerability arises from missing URL validation in flow components, leading to server‑side request forgery. An unauthenticated attacker can supply arbitrary URLs that the server will fetch, enabling it to reach internal or external services. This can facilitate network enumeration, data exfiltration, and may aid subsequent attacks against downstream resources.

IBM Langflow OSS versions 1.0.0 through 1.10.2 are affected. The product is identified by its CPE entries, and the issue is fixed in version 1.10.3; any instance running a vulnerable release should verify its version and apply the update.

The CVSS score of 6.5 indicates a moderate severity. EPSS data is unavailable, so the likelihood of exploitation is unknown. The vulnerability is not listed in CISA's KEV catalog. The likely attack vector is the supply of a malicious URL through the web interface or any exposed flow component API, which requires no prior authentication. Once triggered, the server performs outbound requests based on the supplied URL.