CVE-2026-81940

IBM Langflow OSS versions 1.0.0 to 1.11.5 are vulnerable to arbitrary code execution due to improper handling of special characters in flow display names, allowing remote authenticated attackers to exploit this flaw. Organizations using these versions should prioritize patching this vulnerability to mitigate the risk of unauthorized code execution and potential system compromise. Immediate action is recommended for users managing sensitive data or critical applications within their environments.