Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement (IBM Langflow OSS)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.51 % · percentile 43 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- ibm
- NVD status
- Analyzed
Description
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing key deletion leading to session invalidation.
Weaknesses (CWE)
- CWE-22 — Improper Limitation of a Pathname to a Restricted Directory
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | ibm |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | NVD · psirt@us.ibm.com (Secondary) |
European references
- ENISA EUVD · EUVD-2026-53553
- GCVE · GCVE-0-2026-7658
Affected configurations (NVD CPE)
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*≥ 1.0.0 < 1.11.0
Affected products
| Product | Versions |
|---|---|
| IBM · Langflow OSS | affected 1.0.0 ≤ 1.10.3 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |