IBM Langflow OSS 1.0.0 through 1.9.3 has an authentication bypass combined with improper isolation of Python execution, allowing an unauthenticated remote attacker to execute arbitrary code on the host system and fully compromise it. Patch per IBM guidance in advisory node/7277242 and restrict/disable exposed Langflow endpoints until updated.