Directory Traversal Vulnerability in IBM Langflow OSS
CVE-2026-8183

7.7HIGH

Key Information:

Vendor

IBM
Status
Langflow Oss
Vendor
CVE Published:
5 August 2026

What is CVE-2026-8183?

IBM Langflow OSS versions 1.0.0 through 1.10.3 are susceptible to a directory traversal vulnerability. This issue allows an unauthenticated remote attacker to manipulate URL requests and exploit logical flaws in path validation. By utilizing specially crafted requests containing 'dot dot' sequences ('../'), the attacker can traverse the filesystem and potentially access sensitive files. This could lead to unauthorized information disclosure, posing a significant risk to the security of affected systems. Users are urged to update their installations as soon as patches are available.

Affected Version(s)

Langflow OSS 1.0.0 <= 1.10.3

References

https://www.ibm.com/support/pages/node/7282647
vendor-advisorypatch

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sergio Cabrera (ddlxstudio) https://github.com/nekros1xx
.