CVE-2026-8481 is a critical vulnerability in IBM Langflow OSS (versions 1.0.0 through 1.10.0) involving improper control of code generation (CWE-94). The vulnerability exists because the /api/v1/validate/code endpoint executes user-supplied Python code directly via Python's exec() function without sandboxing, input validation, or privilege restrictions. This design flaw enables authenticated users to execute arbitrary system commands remotely with the full privileges of the Langflow server process, leading to complete compromise of the affected system.

Successful exploitation allows an authenticated attacker to execute arbitrary system commands with the full privileges of the Langflow server process. This can lead to full system compromise, including confidentiality, integrity, and availability impacts. The vulnerability has a CVSS v3.1 score of 9.9, indicating critical severity with network attack vector, low attack complexity, and no user interaction required beyond authentication.

No official patch or remediation is currently available for this vulnerability. Users should monitor IBM advisories for updates. Until a fix is released, restrict access to the affected API endpoint to trusted users only and consider disabling or restricting the /api/v1/validate/code endpoint if possible to prevent exploitation.