Unauthenticated attackers can achieve Remote Code Execution (RCE) on default IBM Langflow OSS deployments, versions 1.0.0 through 1.10.0, by chaining access to the `/api/v1/auto_login` endpoint, which mints SUPERUSER tokens, with the `/api/v1/validate/code` endpoint, which executes user-supplied code via `exec()`.
Langflow OSS +10
remote-code-execution
api-exploitation
unauthenticated-access
code-injection
web-vulnerability
ai-llm
1r
3t
11c
2i
updated