← CVE Intelligence

CVE-2026-8183

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to v i ew arbitrary files on the system.

Affected (CNA)

Vendor / productVersions
IBM / Langflow OSSaffected 1.0.0 through 1.10.3

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.