CVE-2026-8481 is a critical vulnerability in IBM Langflow OSS (versions 1.0.0 through 1.10.0) caused by improper control of code generation (CWE-94). The vulnerability exists in the POST /api/v1/validate/code API endpoint, which accepts Python code from authenticated users and executes it directly using Python's exec() function without any sandboxing, input validation, or privilege restrictions. This allows attackers with authentication to execute arbitrary system commands with the full privileges of the Langflow server process, leading to complete compromise of the affected system.

Exploitation of this vulnerability allows an authenticated attacker to execute arbitrary system commands remotely with the full privileges of the Langflow server process. This can lead to complete system compromise, including unauthorized data access, modification, or destruction, and potential further network pivoting. The vulnerability has a CVSS 3.1 base score of 9.9, reflecting its critical impact on confidentiality, integrity, and availability.

No official fix or patch is currently available for this vulnerability. Since the vulnerability requires authentication, restricting access to the API endpoint and limiting user privileges may reduce risk temporarily. Monitor the vendor's advisory channels for updates on patches or official remediation. Avoid exposing the vulnerable API endpoint to untrusted networks until a fix is released.