Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2026-12227 CVE-2026-14470 · GHSA-w28r-m3q2-p9fg

Path traversal in IBM Langflow OSS

Priority LOW 29

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2026-09-04 No fix listed CWE-22
TI-2026-14449 CVE-2026-17621 · GHSA-vphj-p6fw-rf4h

Path traversal in IBM Langflow OSS

Priority LOW 25

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00395 Published 2026-09-04 No fix listed CWE-22
TI-2026-14450 CVE-2026-17622 · GHSA-2p9v-wv7m-ch4x

Path traversal in IBM Langflow OSS

Priority LOW 30

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00655 Published 2026-09-04 No fix listed CWE-22