Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). This occurs because user-supplied knowledge base names are concatenated directly into file paths without proper sanitization or boundary validation. An authenticated attacker can exploit this flaw to delete arbitrary directories anywhere on the server's filesystem, leading to data loss and potential service disruption. This vulnerability is fixed in 1.9.0.
Published: 2026-05-12
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Langflow versions before 1.9.0 are vulnerable to a path traversal flaw in the Knowledge Bases API. Unvalidated user supplied names become part of file system paths, allowing an authenticated attacker to delete any directory on the server. The flaw leads to loss of data and potential service disruption. The weakness is a classic directory traversal exploit (CWE-22).

Affected Systems

All installations of the Langflow AI platform with version numbers lower than 1.9.0 are affected. The vendor addressed the issue in release 1.9.0, which includes input sanitization for the DELETE /api/v1/knowledge_bases endpoint.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.6 and is classified as a critical weakness, but its EPSS score is currently unavailable and it is not listed in the CISA KEV catalog. Attackers require valid authentication to the API; once authenticated, they can execute the path traversal to delete arbitrary directories without further privileges. Given the high severity score and the potential to cripple services, the risk of exploitation is significant for exposed installations.

Generated by OpenCVE AI on May 12, 2026 at 19:44 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Langflow to version 1.9.0 or later, which sanitizes knowledge base names.
  • Restrict access to the DELETE /api/v1/knowledge_bases endpoint to trusted administrators and enforce least‑privilege file permissions on the server.
  • As an interim measure, disable or remove the DELETE capability for knowledge bases via configuration changes or API gateway rules.

Generated by OpenCVE AI on May 12, 2026 at 19:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-9whx-c884-c68q Langflow Knowledge Bases API is Vulnerable to Path Traversal
History

Thu, 14 May 2026 13:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

Wed, 13 May 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 13 May 2026 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Langflow
Langflow langflow
Vendors & Products Langflow
Langflow langflow

Tue, 12 May 2026 18:15:00 +0000

Type Values Removed Values Added
Description Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). This occurs because user-supplied knowledge base names are concatenated directly into file paths without proper sanitization or boundary validation. An authenticated attacker can exploit this flaw to delete arbitrary directories anywhere on the server's filesystem, leading to data loss and potential service disruption. This vulnerability is fixed in 1.9.0.
Title Langflow: Path Traversal in Langflow Knowledge Bases API
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H'}

Subscriptions

Langflow Langflow
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-05-13T14:14:16.193Z

Reserved: 2026-04-23T16:05:01.709Z

Link: CVE-2026-42048

cve-icon Vulnrichment

Updated: 2026-05-13T14:14:01.068Z

cve-icon NVD

Status : Analyzed

Published: 2026-05-12T18:17:23.780

Modified: 2026-05-14T12:52:16.603

Link: CVE-2026-42048

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-13T09:45:09Z

Weaknesses