A critical remote code execution vulnerability in IBM Langflow OSS allows authenticated attackers to gain root-level control and compromise sensitive cloud and network infrastructure.

The application is susceptible to Server-Side Request Forgery (CWE-918) and arbitrary code execution, where an authenticated user can submit malicious components containing socket or urllib imports to trigger code execution with root (UID=0) privileges.

This vulnerability poses a severe risk to organizational security, as it allows attackers to steal AWS credentials, exfiltrate sensitive files, and move laterally to internal databases like PostgreSQL and Redis. Given the CVSS score of 9.6, the potential for a full system compromise and loss of cloud-based identity permissions warrants immediate attention to prevent catastrophic data breaches.

Immediate Action: Upgrade IBM Langflow OSS to version 1.10.1 immediately to resolve the underlying code execution flaw.

Proactive Monitoring: Review container logs for unauthorized socket or urllib imports and inspect network traffic for anomalous requests originating from the Langflow container to internal services or cloud metadata endpoints.

Compensating Controls: Implement strict network segmentation and egress filtering to block the Langflow container from reaching sensitive internal services or the AWS IMDSv1 service.

Public Exploit Available: No (exploit_available: unknown)

The severity of this vulnerability, combined with the potential for root-level access and cloud credential theft, necessitates an emergency patching cycle. Organizations currently running versions 1.0.0 through 1.10.0 should prioritize the update to version 1.10.1 to eliminate the risk of remote code execution.