IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a critical vulnerability that allows a remote authenticated attacker to execute arbitrary code due to missing authorization controls. The flaw affects confidentiality, integrity, and availability with a high severity score of 9.9.