CVE-2026-17630: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation

IBM Langflow OSS (an open-source tool for building AI applications) versions 1.0.0 through 1.10.3 has a vulnerability where attackers can run arbitrary code (commands of their choice) on affected systems due to improper validation of configuration parameters (settings that control how the software behaves). This weakness stems from incomplete input filtering, meaning the software doesn't properly block dangerous values that users or attackers might provide.