← CVE Intelligence

CVE-2026-79725

Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.

Affected (CNA)

Vendor / productVersions
IBM / Langflow OSSaffected 1.0.0 through 1.11.5

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.