IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system, which may enable network enumeration or support further attacks. The vulnerability has a medium severity rating with a CVSS score of 4.3.