Description
IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Published: 2026-07-30
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows a remote attacker to perform directory traversal by sending specially crafted URLs containing "../" sequences to view arbitrary files on the system. This path traversal flaw enables disclosure of sensitive data and may expose configuration files or code artifacts. The weakness is classified as CWE-22 and does not require privilege escalation beyond the application’s process context.

Affected Systems

IBM Langflow OSS versions 1.0.0 through 1.10.1 are affected. The vulnerability impacts all deployments of these editions that expose any unprotected API endpoint accepting file paths.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity issue. EPSS score of less than 1% indicates a very low exploitation probability. The flaw is exploitable through unauthenticated or insufficiently authorized API endpoints as inferred from the title and typical usage. The vulnerability is not currently listed in CISA KEV, yet the lack of a public exploit does not mitigate the risk of attackers crafting requests to read arbitrary files.

Generated by OpenCVE AI on August 3, 2026 at 10:40 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.2 https://pypi.org/project/langflow/

OpenCVE Recommended Actions

  • Upgrade IBM Langflow OSS to version 1.10.2 or later as recommended by IBM.
  • Restrict access to API endpoints that accept file paths, ensuring they are only reachable by authorized users.
  • Configure the web server or reverse proxy to reject or sanitize requests containing "../" sequences to prevent directory traversal attacks.

Generated by OpenCVE AI on August 3, 2026 at 10:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 30 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 30 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Title Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-22
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.10.1:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Ibm Langflow Oss
Langflow Langflow
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-07-30T17:32:16.191Z

Reserved: 2026-06-22T19:52:54.670Z

Link: CVE-2026-12942

cve-icon Vulnrichment

Updated: 2026-07-30T17:32:13.025Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-30T19:17:05.297

Modified: 2026-08-04T20:16:59.160

Link: CVE-2026-12942

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T10:45:03Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')