IBM Langflow OSS EUVD-2026-113139

The available sources state only that affected versions improperly neutralize special elements used in an OS command, enabling arbitrary code execution; the exact triggering feature, endpoint, parameter, or configuration mode is not described in the available sources. Limiting factors per the data: exploitation requires network reachability to a Langflow OSS instance in the 1.0.0-1.12.3 range, and instances already updated to the vendor-patched release are not affected. Per the CVSS vector no authentication (PR:N) and no user interaction (UI:N) are required, so an exposed, unpatched instance is exploitable by a remote unauthenticated attacker; the degree of real-world exposure depends on whether the instance is internet-facing versus restricted to an internal network.

This is a genuine high-priority issue, not an inflated high-CVSS score. The CVSS 3.1 vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) describes network-reachable, low-complexity exploitation requiring no privileges and no user interaction, yielding full confidentiality, integrity and availability impact via arbitrary code execution (CWE-94 / OS command injection). The vuln.today decision label is act_now, and a vendor patch is available, both of which argue for immediate remediation. Countervailing signals: there is no CISA KEV listing, no EPSS probability supplied, and no public PoC or exploit reference in the input - so there is no evidence of active exploitation or weaponized code at this time, and the act_now label rests on the severity/exposure profile rather than observed in-the-wild activity. Note a classification tension: CWE-94 is 'Code Injection' while the description and tags describe OS command injection (CWE-78); this does not change the RCE outcome but should be verified against the IBM advisory. Net: patch now because of unauthenticated network RCE on a reachable service, while recognizing exploitation is currently projected, not confirmed.

A remote attacker reaches an exposed IBM Langflow OSS instance (versions 1.0.0 through 1.12.3) over the network and submits input that is passed unsanitized into an OS command, causing the server to execute attacker-supplied commands. Per the CVSS vector this requires no authentication and no user interaction with low attack complexity. No public exploit code is referenced in the available data, and the exact vulnerable endpoint or parameter is not described in the sources.