IBMCVE-2026-7646
IBM Langflow OSS: path traversal
Medium6.5CVE-2026-7646 · Published Aug 5, 2026 · updated Aug 6, 2026
IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Langflow OSS Product | >= 1.0.0, <= 1.10.3 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-22
More IBM advisories
All IBM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 5 | IBM Langflow OSS: weak cryptography | High7.4 | No fix yet |
| Aug 5 | IBM Langflow OSS: code injection | High8.1 | No fix yet |
| Aug 5 | IBM Langflow OSS: code execution | High8.8 | No fix yet |
| Aug 5 | IBM Langflow OSS: information disclosure | High7.1 | No fix yet |
| Aug 5 | IBM Langflow OSS: code injection | High8.8 | No fix yet |
| Aug 5 | IBM Langflow OSS: broken cryptography | High7.4 | No fix yet |