A critical vulnerability in IBM Langflow OSS allows authenticated users to achieve remote code execution on the host server, posing a severe risk to infrastructure integrity.

This flaw, identified as CWE-95, involves improper neutralization of directives in dynamically evaluated code. An authenticated user can bypass the LANGFLOW_ALLOW_CUSTOM_COMPONENTS policy by crafting a malicious flow type that triggers arbitrary OS command execution under the server process identity.

The ability to execute arbitrary OS commands grants an attacker full control over the server hosting the Langflow instance. Given the CVSS score of 9.9, this vulnerability represents a critical risk that could lead to complete system compromise, data exfiltration, or the deployment of persistent malware within the internal environment.

Immediate Action: Upgrade IBM Langflow OSS to version 1.11.2 or later immediately to resolve the command injection flaw.

Proactive Monitoring: Review server access logs for anomalous build triggers or unexpected process execution patterns originating from the Langflow user interface.

Compensating Controls: Restrict network access to the Langflow management interface to trusted internal segments only, and apply strict environment variable configurations to prevent custom component loading if an immediate upgrade is not feasible.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Due to the critical nature of this remote code execution vulnerability, organizations must prioritize the update to version 1.11.2. Failure to remediate this issue allows any authenticated user to escalate privileges and gain full control over the underlying server OS, effectively bypassing existing platform security controls.