Executive brief
IBM Langflow OSS is a low-code platform for building AI applications. The software contains path traversal vulnerabilities in its file handling and knowledge base components that allow an authenticated attacker to read arbitrary files from the server, including sensitive data like credentials and cryptographic keys. An attacker could exploit this to access confidential information and potentially compromise the system or gain deeper access to protected resources.
Technical details
This is a path traversal vulnerability (CWE-22) affecting multiple Langflow OSS components: the Directory component, Knowledge Base connector ingestion endpoint, and Knowledge Base flow component. The root cause is improper validation of user-supplied file paths; attackers can inject directory traversal sequences (/../) to access files outside the intended application directories. The vulnerability requires authentication and is exploitable over the network with low attack complexity. An authenticated attacker can enumerate and read arbitrary files accessible by the server process, including credentials, private keys, and JWT secrets. IBM recommends upgrading to Langflow OSS 1.10.3 or later; no workarounds are documented.
Affected products
- IBM Langflow OSS 1.0.0 through 1.10.2
Timeline
- 2026-09-04: disclosed