A critical remote code execution vulnerability in IBM Langflow OSS allows attackers to achieve full system compromise through insecure deserialization of cached objects.

The application utilizes the unsafe pickle.loads function to deserialize cached data from disk without validation. This flaw allows an attacker with access to the file system, workflow inputs, or API to execute arbitrary code with the privileges of the server process.

Successful exploitation of this vulnerability grants an attacker complete control over the Langflow server. Given the CVSS score of 9.9, this represents a critical risk of total data breach, unauthorized system access, and potential lateral movement within the network.

Immediate Action: Upgrade IBM Langflow OSS to version 1.10.1 immediately to patch the insecure deserialization mechanism.

Proactive Monitoring: Inspect server logs for unusual file system activity or unexpected process executions originating from the Langflow service.

Compensating Controls: Restrict file system access for the service account running Langflow to the minimum required directories and implement network segmentation to isolate the application environment.

Public Exploit Available: No

This vulnerability is highly severe and requires immediate attention. Organizations running IBM Langflow OSS must prioritize the update to version 1.10.1 to eliminate the risk of remote code execution and maintain the integrity of their infrastructure.