Langflow OSS is vulnerable to code injection during graph construction, allowing a remote attacker to execute arbitrary code over the network. Affected: Langflow OSS 1.0.0 through 1.11.5 (semver). Impact includes full compromise (C/I/A). Remediate by upgrading to 1.11.6 per IBM advisory.