CVE-2026-7646CWE-22path-traversal

CVE-2026-7646

Medium · published August 5, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
41.9
In the wild
Unconfirmed
What it is

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-05T21:16Z
Affected products (1)
ProductVersionsFixed in
langflow/langflow≥ 1.0.0, < 1.11.01.11.0
References (1)
https://www.ibm.com/support/pages/node/7282147 · [email protected]
EPSS history
Timeline
  • 05 AUG 16:25Z
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    cvelistv5