CVE-2026-7803: IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with

IBM Langflow OSS (an open-source tool for building AI workflows) versions 1.0.0 through 1.10.0 has a security flaw where it doesn't properly check the data in flow nodes (building blocks of a workflow) when their component type fields are missing or empty, which could allow an attacker to run arbitrary code (any commands they want) on the system. The vulnerability is caused by improper input validation (failing to check whether incoming data is safe and correct before using it).