CVE-2026-84889

A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.3

CWE

CWE-22

References

https://www.ibm.com/support/pages/node/7286656

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.