CVE-2026-17633: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code

IBM Langflow OSS (an open-source AI tool framework) versions 1.0.0 through 1.10.3 has a vulnerability that allows an authenticated attacker (someone with login access) to run arbitrary code (any commands they choose) on the system through code injection (inserting malicious code into the application's input). The vulnerability has a CVSS score (severity rating on a 0-10 scale) that has not yet been assigned by NIST.