IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a server-side request forgery (SSRF) vulnerability. This flaw allows an unauthenticated attacker to send unauthorized requests from the affected system. Exploitation could lead to network enumeration or assist in other attacks. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. No patch or remediation information is currently provided by the vendor. The affected versions are explicitly stated as 1.0.0 through 1.11.5.