A flaw in IBM Langflow OSS versions 1.0.0 through 1.12.2 allows a remote user with valid credentials to supply malformed input that bypasses server‑side validation, enabling arbitrary code execution. The vulnerability falls under CWE‑693, which involves improper restriction of operations within program bounds. Successful exploitation could give an attacker full control of the server, compromising confidentiality, integrity, and availability of the hosting environment.

IBM’s open‑source Langflow OSS product is affected. All installations running any release from version 1.0.0 up to and including 1.12.2 are vulnerable. The vulnerability description lists CPE identifiers for 1.0.0 and 1.12.2; earlier and later releases are not mentioned as impacted.

The CVSS score of 8.8 classifies this vulnerability as high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, indicating no publicly known exploitation yet. The attack requires a valid user account on the system, implying a remote authenticated attacker can trigger the flaw. No additional prerequisites beyond authentication are documented, so an attacker with legitimate credentials can potentially execute code directly.