IBM Langflow OSS versions 1.0.0 through 1.10.2 contain a vulnerability that allows a remote authenticated attacker to change the password of an account due to improper authentication controls. This issue does not allow unauthenticated access but requires some level of authentication. The vulnerability impacts the integrity and availability of the affected system. The CVSS score is 5.4, indicating a medium severity level.