IBM Langflow OSS code injection vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection vulnerability. This vulnerability allows remote attackers with low-privilege authentication to exploit the unblocked mode, enabling the Agentic Assistant to generate or submit component code. This may result in arbitrary...