The vulnerability notice reports that multiple unauthenticated and insufficiently authorized API endpoints could allow remote code execution, denial of service, path traversal, and credential exposure. The technical description confirms that an authenticated user can exploit an OS command injection flaw in the Python Interpreter component of IBM Langflow OSS. Through this flaw, unvalidated user‑supplied input is passed to the operating system shell, allowing the attacker to run arbitrary commands with elevated system privileges, thereby compromising the host’s confidentiality, integrity, and availability. While the notice lists several other potential impacts, only the data‑exfiltration and denial‑of‑service aspects are explicitly supported by the description for the authenticated scenario; the other claims remain unverified in the supplied details.

IBM Langflow OSS versions 1.0.0 through 1.10.1 are affected. Users running any of these releases are vulnerable until the product is upgraded to version 1.10.2 or later.

The CVSS score of 8.8 signals high severity, yet the EPSS score of less than 1 % indicates a very low current exploitation probability. The issue is not listed in the CISA KEV catalog. The attack vector requires an authenticated session, and no publicly known exploits are documented. Due to the ability to execute arbitrary commands, the risk to the entire host is material, especially where privileged accounts exist.