Live › vulnerability › CVE-2026-110190
IBM Langflow OSS versions 1.0.0 through 1.12.4 let a logged-in user traverse directories through a crafted URL request. An attacker can use this to view arbitrary files on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Self-hosted Langflow OSS 1.0.0 through 1.12.4 where people can log in. Any authenticated user, even low-privileged, may be able to read arbitrary files the Langflow process can reach, such as config and secrets. IBM's bulletin does not name the endpoint. Skip it if you are already on 1.12.5 or later, or if you run no Langflow OSS.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Langflow OSS | pypi | >= 1.0.0, <= 1.12.4 | 1.12.5 |
pip show langflow or langflow --version1.0.0 through are affected; is fixed1.12.41.12.51.12.5 (IBM)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system.
This page as .md · .json · in your agent: get_signal("CVE-2026-110190")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.