CVE-2026-10134 is a critical code injection vulnerability in IBM Langflow OSS (versions 1.0.0 through 1.9.3). The flaw allows attackers without privileges or user interaction to execute arbitrary code by injecting into the public flow's `tool_code`. This leads to full compromise of the Langflow environment, including access to all secrets, modification of all stored data, lateral movement across tenants, and persistent code execution triggered by normal API build calls. The vulnerability has a CVSS 3.1 base score of 10.0, indicating maximum severity and impact. No official patch or remediation guidance has been published at this time.

Successful exploitation results in complete compromise of the Langflow OSS instance. Attackers gain full read and write access to all sensitive data and components, can connect to internal services, abuse cloud metadata endpoints, move laterally to other tenants on the same instance, and maintain persistence by injecting malicious code into public flows. This leads to total loss of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to Langflow OSS instances, monitor for suspicious activity related to flow modifications, and consider isolating affected deployments. Avoid exposing Langflow OSS to untrusted networks or users.