CVE-2026-14470 — Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base comp…

CVE-2026-14470

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.2

CWE

CWE-22

References

https://www.ibm.com/support/pages/node/7286293

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.