Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: IBM Langflow OSS — ibm.com/support/pages/node/7285643 Clear all filters
TI-2026-15746 CVE-2026-19303 · GHSA-8jqr-ww88-m5p2

Path traversal in IBM Langflow OSS

Priority LOW 36

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00615 Published 2026-09-04 No fix listed CWE-22
TI-2026-08034 CVE-2026-9138 · GHSA-44jp-wv2q-qjwp

Path traversal in IBM Langflow OSS

Priority LOW 29

IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the server due to improper input validation in the SaveToFileComponent.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00452 Published 2026-09-04 No fix listed CWE-22