IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a critical vulnerability that allows remote attackers to execute arbitrary code. This is due to improper control of code generation within the software. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.