CVE-2026-81211

IBM Langflow OSS versions 1.0.0 to 1.11.5 are vulnerable to arbitrary Python code execution by remote authenticated attackers, stemming from improper authorization of custom components in stored flows. This high-severity vulnerability poses a significant risk to any organization using these versions, as it could lead to unauthorized access and manipulation of sensitive data. Organizations utilizing IBM Langflow OSS should prioritize immediate remediation to mitigate potential exploitation.