NetSight
high8.8

CVE-2026-110244

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a…

Impact

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

Affected products

VendorProductAffected versions
LangflowLangflow
from 1.0.0 before 1.12.5

Weakness classification

References