A vulnerability was discovered in IBM Langflow OSS versions 1.0.0 through 1.10.0, allowing unauthenticated attackers to obtain a SUPERUSER token via the /api/v1/autologin endpoint. This token can then be used to execute arbitrary code via the /api/v1/validate/code endpoint, resulting in remote code execution (RCE) in default Langflow deployments. This exploit is a proof-of-concept and should only be tested on authorized systems. It may cause unintended consequences such as downtime or data corruption.