Code execution via poisoned Redis cache deserialization

Untrusted cache deserialization in IBM Langflow OSS 1.0.0 through 1.12.2 allows attackers to execute code through poisoned Redis values. The Redis cache retrieval path deserializes a stored value that an attacker can replace with a malicious serialized payload, executing code with the service process's privileges when that entry is read. Exploitation requires the server secret, Redis write access, and a subsequent read of the poisoned entry; Redis caching is not the default configuration.