CVE-2026-110190: IBM Langflow OSS vulnerability

Q: Who can exploit this issue?

An attacker must be authenticated to Langflow OSS and able to send a specially crafted URL request.

Q: What access could a successful attacker gain?

A successful exploit could allow the attacker to traverse directories and view arbitrary files on the underlying system.

Published Oct 19, 2026

Updated

Langflow OSS could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system.

Affected Software

1 affected component

IBM Langflow OSS<=1.0.0 - 1.12.4

Event History

Oct 19, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7293016

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to Langflow OSS and able to send a specially crafted URL request.

What access could a successful attacker gain?

A successful exploit could allow the attacker to traverse directories and view arbitrary files on the underlying system.