Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: IBM Langflow OSS — ibm.com/support/pages/node/7286657 Clear all filters
TI-2026-08108 CVE-2026-9225 · GHSA-v63q-2gxx-5p2w

Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

Priority LOW 29

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00385 Published 2026-09-10 No fix listed CWE-639