Executive brief
IBM Langflow OSS is a low-code application development platform that allows users to build AI-powered workflows. An authenticated attacker can exploit a path traversal vulnerability to read arbitrary files on the server, including sensitive credentials, private keys, and security tokens. This could enable unauthorized access to sensitive data and compromise the confidentiality of the hosting system.
Technical details
CVE-2026-14470 is a path traversal vulnerability (CWE-22) in IBM Langflow OSS versions 1.0.0 through 1.10.2. The vulnerability exists in multiple components: the Directory component, Knowledge Base connector ingestion endpoint, and Knowledge Base flow component, where user-supplied path values are not properly validated to prevent directory traversal sequences (/../). An authenticated attacker can craft specially formatted URL requests containing dot-dot sequences to traverse outside the intended application directories and read arbitrary files accessible to the server process. Exploitation requires authentication but no user interaction, and can disclose sensitive information including credentials, private keys, and JWT signing secrets. IBM recommends upgrading to version 1.10.3 or later.
Affected products
- IBM Langflow OSS 1.0.0 through 1.10.2
Timeline
- 2026-09-04: disclosed