medium6.5
CVE-2026-110190
IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system.
Impact
IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Langflow | Langflow | from 1.0.0 before 1.12.5 |