A Path Traversal flaw in the File component of IBM Langflow OSS allows an attacker who can authenticate to the system to access any file on the host, including the JWT signing key. By reading the key the attacker can forge tokens and impersonate all users, achieving full administrative control. The vulnerability is identified as CWE‑22 and results in a loss of confidentiality, integrity, and availability for authenticated users because they can read or alter arbitrary data and bypass security controls.

IBM Langflow OSS versions 1.0.0 through 1.10.0 are vulnerable. The affected release range includes the initial 1.0.0 and all builds up to 1.10.0. IBM recommends upgrading to version 1.10.1 to mitigate the flaw. The product is available from the IBM PyPI repository.

The CVSS base score of 7.5 indicates a high severity risk. The EPSS score is under 1%, suggesting a very low probability of exploitation at the time of this analysis. The flaw is not listed in the CISA KEV catalog. Exploitation requires an attacker to first authenticate to the system; once authenticated, the path traversal can be leveraged to read any file. The combination of legitimate credentials and the ability to forge tokens makes this vulnerability particularly dangerous for any environment that relies on JWTs for access control.