Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Langflow OSS — ibm.com/support/pages/node/7285641 Clear all filters
TI-2026-15742 CVE-2026-19299 · GHSA-rj5m-gxpg-4hwq

Path traversal in IBM Langflow OSS

Priority LOW 30

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00655 Published 2026-09-04 No fix listed CWE-22
TI-2026-15745 CVE-2026-19302 · GHSA-7j2r-wcp8-6mjf

Path traversal in IBM Langflow OSS

Priority LOW 30

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00655 Published 2026-09-04 No fix listed CWE-22
TI-2026-15749 CVE-2026-19306 · GHSA-hh38-vgr5-vvww

Path traversal in IBM Langflow OSS

Priority LOW 34

IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material (secret_key, JWT signing keys, the application database, /proc/…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0054 Published 2026-09-04 No fix listed CWE-22