CVE-2026-18899: Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities
Published Aug 21, 2026
·Updated
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal.
Other sources
Langflow OSS could allow a remote attacker to read arbitrary files due to path traversal.
— IBM
Affected Software
1 affected component
IBM Langflow OSS<=1.0.0-1.11.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.11.2
Event History
Aug 21, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Aug 28, 2026
CVE Published
via MITRE·08:51 PM
Data Sourced
via MITRE·08:51 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates no privileges are required and no user interaction is needed; the attack can be performed remotely over the network.
2
What is the security impact of successful exploitation?
An attacker could read arbitrary files. The supplied CVSS metrics rate confidentiality impact as high, with no indicated integrity or availability impact.
3
Which releases should be considered affected when assessing exposure?
IBM Langflow OSS versions 1.0.0 through 1.11.1 are identified as affected.