Langflow EUVD-2026-75794

Per the CVSS vector, no authentication (PR:N) and no user interaction (UI:N) are required, and the attack is network-reachable (AV:N) with low complexity (AC:L), implying remote unauthenticated exploitation against affected Langflow OSS 1.0.0-1.11.5 instances that expose the vulnerable command-handling endpoint. The concrete prerequisite is network reachability of the affected Langflow service and the ability to reach the specific input path that flows into an OS command; the description does not name a required non-default feature toggle. The primary limiting factor is exposure - instances placed behind authentication, network segmentation, or a reverse proxy are far less reachable in practice despite the PR:N rating; the exact vulnerable endpoint is not specified in the available data.

This is a genuine high-priority issue: the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, score 9.8) describes unauthenticated, low-complexity, network-reachable command execution with total host impact, and the CWE-78 class is highly automatable once a working request is known - so any organization running an internet-exposed Langflow instance should treat this as urgent. That said, no EPSS score, KEV listing, SSVC decision, or public POC is present in the provided data, so 'no public exploit identified at time of analysis' - the severity rests on the vector and CWE rather than confirmed exploitation. The main uncertainty is exposure: many Langflow deployments sit behind authentication or on internal networks, which would materially reduce real-world reachability despite the PR:N rating; verify the exact vulnerable endpoint and whether your instance is publicly accessible.

An attacker discovers an internet-exposed Langflow OSS instance and sends a crafted request to the vulnerable endpoint containing shell metacharacters in a field that is passed into an OS command. Because no authentication is required (PR:N) and complexity is low, the injected command executes on the host, giving the attacker code execution to exfiltrate data, pivot into the network, or deploy further payloads. No public exploit code is currently identified, but the CWE-78 pattern is straightforward to weaponize.