Vulnerabilities CVE-2026-12942

CVE-2026-12942

High

Open

TLP:CLEAR

Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 0.42%

34.4th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Confidence: 90%
Published: Jul 30, 2026
Last Modified: Jul 30, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.