CVE-2026-12942

Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

Published Jul 30, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.

Analysis

Technical impact

The vulnerability allows a remote attacker to perform directory traversal by sending specially crafted URLs containing "../" sequences to view arbitrary files on the system. This path traversal flaw enables disclosure of sensitive data and may expose configuration files or code artifacts. The weakness is classified as CWE-22 and does not require privilege escalation beyond the application’s process context.

Affected Systems

IBM Langflow OSS versions 1.0.0 through 1.10.1 are affected. The vulnerability impacts all deployments of these editions that expose any unprotected API endpoint accepting file paths.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity issue. EPSS score of less than 1% indicates a very low exploitation probability. The flaw is exploitable through unauthenticated or insufficiently authorized API endpoints as inferred from the title and typical usage. The vulnerability is not currently listed in CISA KEV, yet the lack of a public exploit does not mitigate the risk of attackers crafting requests to read arbitrary files.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

IBM

Langflow OSS

affected

Version	Status	Constraints
`1.0.0`	affected	≤ 1.10.1

Configuration 1 [-]

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Ibm

Langflow Oss

Version	Status	Scheme	Platform
`[1.0.0,1.10.1]`	affected	semver	—

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.2 https://pypi.org/project/langflow/

OpenCVE Recommended Actions

Upgrade IBM Langflow OSS to version 1.10.2 or later as recommended by IBM.
Restrict access to API endpoints that accept file paths, ensuring they are only reachable by authorized users.
Configure the web server or reverse proxy to reject or sanitize requests containing "../" sequences to prevent directory traversal attacks.

Generated by OpenCVE AI on August 3, 2026 at 10:40 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.623% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://www.ibm.com/support/pages/node/7279993

History

Jul 30, 2026 6:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jul 30, 2026 5:30 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Title		Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints
First Time appeared		Ibm Ibm langflow Oss
Weaknesses		CWE-22
CPEs		cpe:2.3:a:ibm:langflow_oss:1.0.0:::::::* cpe:2.3:a:ibm:langflow_oss:1.10.1:::::::*
Vendors & Products		Ibm Ibm langflow Oss
References		https://www.ibm.com/support/pages/node/7279993
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`