Langflow 1.4.2 allows unauthenticated code injection via the validate endpoint by passing Python in the code parameter, which is executed without proper string validation. Network attackers can run arbitrary code as root, enabling full system compromise. Upgrade Langflow to a newer version than 1.4.2 and restrict/disable public access to the validate endpoint.