CVE-2026-17622

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.2

CWE

CWE-22

References

https://www.ibm.com/support/pages/node/7286293

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.