CVE-2026-81941: IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating

IBM Langflow OSS versions 1.0.0 through 1.11.5 have a vulnerability where logged-in non-admin users can run arbitrary operating system commands (OS commands, or instructions executed directly on a computer) on the server by creating a flow that uses an MCP Tools component with local stdio subprocess transport, bypassing security controls meant to prevent this. This could allow attackers to access sensitive information, modify files, or move laterally (gain access to other connected systems) within the network.