IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a flaw that allows a remote authenticated attacker to read files outside the intended restricted directory. The flaw is a CWE‑22 path traversal weakness. The vulnerability arises from improper limitation of a pathname, enabling the disclosure of sensitive data stored on the server. This weakness results in unauthorized exposure of confidential information rather than code execution or service disruption.

The flaw affects IBM Langflow OSS. All releases from version 1.0.0 up to and including 1.12.2 are impacted. Based on the product's usual packaging and documentation, it is inferred that the software is distributed through the Python package index as the "langflow" package and is typically installed within Python environments.

The CVSS score of 8.1 indicates a high severity level. Though the EPSS score is not provided, the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker must first authenticate to the Langflow OSS instance; after authentication, the attacker can supply crafted pathname inputs that bypass the restricted directory check and read arbitrary files. No public exploits are documented, so the risk remains moderate for systems handling sensitive data.