CVE-2026-18899

Friday, August 28, 2026

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal.

Vendor	Product	Version Range	Status
IBM	Langflow OSS	`1.0.0 <= 1.11.1`	affected

CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Was this page helpful?

Sorry to hear that. Please tell us how we can improve.