← CVE Intelligence

CVE-2026-7524

Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

Affected (CNA)

Vendor / productVersions
IBM / Langflow OSSaffected 1.0.0 through 1.9.1

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.