Executive brief
IBM Langflow OSS, a visual framework for building AI-powered workflows, is vulnerable to a security flaw that allows unauthorized access to system files. By sending a specially crafted web request, an attacker can bypass security restrictions to view sensitive information stored on the server, such as configuration files or credentials. This could lead to a full compromise of the AI environment and any connected data sources.
Technical details
A path traversal vulnerability (CWE-22) exists in IBM Langflow OSS versions 1.0.0 through 1.10.1. The flaw is caused by insufficient validation of user-supplied input in file path parameters, specifically failing to filter 'dot dot' (/../) sequences. A remote, unauthenticated attacker can exploit this by sending a specially crafted URL request to the service's API endpoints. Successful exploitation allows the attacker to read arbitrary files accessible to the service process, which may include JWT signing secrets, stored credentials, and system configuration files. The vulnerability is addressed in version 1.10.2.
Affected products
- IBM Langflow OSS 1.0.0 - 1.10.1
Timeline
- 2026-07-14: disclosed: Initial publication by IBM
- 2026-07-14: patched: Version 1.10.2 released
- 2026-07-30: advisory: NVD publication date