CVE-2026-14499: IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elev

IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.1 has a vulnerability where authenticated users (those who have logged in) can run arbitrary commands (any code they choose) with elevated privileges (higher access level) due to improper validation of user input in the Python Interpreter component (the part that executes Python code). The vulnerability stems from OS command injection (CWE-78, where attackers embed malicious system commands in their input), allowing attackers to bypass security checks.