Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

Langflow versions before 1.3.0 allow anyone on the internet to run malicious code on the server without logging in, by sending specially crafted requests to a code validation endpoint. This is critical because attackers can take complete control of the affected system.

An unauthenticated remote attacker can exploit code injection in the /api/v1/validate/code endpoint to achieve arbitrary code execution on the server. The vulnerability exists due to insufficient input validation in code validation logic, requiring only network access to the vulnerable endpoint; successful exploitation grants full system compromise.