Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-9225

Langflow OSS · path traversal

CVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-9225

Published

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/{flow_id} endpoint, the application allows component inputs to reference storage paths using arbitrary user or flow identifiers without verifying ownership. An attacker with low‑privileged authenticated access can supply a crafted file path pointing to another user’s storage namespace, causing the backend to read and return the contents of files uploaded by other users. This vulnerability bypasses intended authorization checks enforced by the file management API and may result in unauthorized disclosure of sensitive user data.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-9225

Published

Langflow OSS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Langflow OSS",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "1.0.0",
                            "lessThanOrEqual": "1.11.5",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON