CyberRota Analysis
AI-GeneratedDocker installations running IBM Langflow OSS versions 1.0.0 to 1.10.0 are vulnerable to arbitrary Python code execution with root privileges, allowing attackers to exploit components that utilize socket or urllib imports. This critical vulnerability can lead to AWS credential theft, arbitrary file exfiltration, and lateral movement to internal services within the Docker network. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of severe data breaches and unauthorized access.
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.