IBM Langflow OSS contains a critical remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary commands via environment variables.

The vulnerability is an OS Command Injection (CWE-78) flaw located in the MCP stdio launcher. The application fails to properly sanitize specific environment variables, such as SHELLOPTS and PS4, allowing an attacker to manipulate execution behavior.

The ability for an unauthenticated user to execute commands remotely carries a CVSS score of 9.8. This level of access grants the attacker the same permissions as the application service account, which could lead to full system takeover, unauthorized data access, and the deployment of persistent malware.

Immediate Action: Upgrade IBM Langflow OSS to version 1.10.2 immediately to implement the required sanitization of dangerous environment variables.

Proactive Monitoring: Monitor server process logs for unusual execution patterns or the spawning of unauthorized shells.

Compensating Controls: Deploy a Web Application Firewall (WAF) to filter incoming requests and block attempts to inject prohibited environment variables or command sequences.

Public Exploit Available: No

Given the ease of exploitability and the critical nature of remote code execution, organizations should prioritize upgrading their Langflow OSS deployments. Ensure that all production environments are running version 1.10.2 or later to mitigate this risk.