CVE-2026-19303: Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components
Published Aug 28, 2026
·Updated
IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory.
Other sources
Langflow OSS could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory.
— IBM
Affected Software
1 affected component
IBM Langflow OSS<=1.0.0-1.11.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.11.3
Event History
Aug 28, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 4, 2026
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue requires remote authenticated access to IBM Langflow OSS.
2
What is the potential impact of successful exploitation?
An authenticated remote attacker could delete arbitrary local files or directories because pathname handling is not properly restricted to an intended directory.