CVE-2026-104309: Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Other sources
Langflow OSS could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.12.4 - Operational
Back up the existing Langflow OSS installation before upgrading, then test your flows after installing version 1.12.4.
Event History
Frequently Asked Questions
Which versions are affected?
IBM Langflow OSS versions 1.0.0 through 1.12.3 are identified as affected.
What level of access does an attacker need?
Exploitation requires remote authenticated access with low privileges. No user interaction is required.
What could an attacker obtain?
An attacker could obtain sensitive information by exploiting improper restrictions on pathnames intended to remain within a restricted directory.