IBM Langflow OSS is an open source low-code visual AI workflow construction tool from IBM in the United States. It allows developers to quickly build, deploy and iterate AI agents and RAG applications by dragging and dropping components. It also supports in-depth customization using Python to integrate enterprise systems. IBM Langflow OSS has a code injection vulnerability. This vulnerability is caused by flaws in the authentication and code execution modules. An attacker can use this vulnerability to achieve remote code execution by concatenating the /api/v1/auto_login and /api/v1/validate/code interfaces.