IBM Langflow OSS versions 1.0.0 through 1.11.2 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system. This may enable network enumeration or assist in other attacks. The vulnerability has a medium severity rating with a CVSS score of 5.4. No patch or remediation details are currently provided.