CVE-2026-7646

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

Score
CVSS 3.1 6.5 Medium
Status
Analyzed - psirt@us.ibm.com
Published
2026-08-05
Last modified
2026-10-24
Weaknesses
CWE-22

Affected products

References

 
 
© AVABIS GmbH privacypolicy about