CVE-2026-7646
Received Received - Intake

Path Traversal in IBM Langflow OSS

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: IBM Corporation

Description
IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-7646
EUVD
EUVD-2026-53464

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
ibm langflow_oss From 1.0.0 (inc) to 1.10.3 (inc)
ibm langflow From 1.0.0 (inc) to 1.10.3 (inc)
ibm langflow 1.11.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Langflow OSS 1.0.0 through 1.10.3 has a vulnerability where users can read arbitrary files from the server filesystem. This includes other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables. The attack is performed by sending a crafted MCP resources/read request with a URL-encoded path traversal sequence in the filename.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual MCP `resources/read` requests with URL-encoded path traversal sequences. Check server logs for requests containing patterns like `%2e%2e%2f` or `%252e%252e%252f` in filenames. Inspect network traffic for unauthorized file access attempts to sensitive paths such as /etc/, /home/, or application directories.

Impact Analysis

This vulnerability allows unauthorized access to sensitive files on the server. Attackers could steal confidential data such as user documents, encryption keys, or database contents. It may also lead to further attacks if environment variables or secrets are exposed.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA due to unauthorized access to personal and sensitive data. GDPR requires protection of personal data, while HIPAA mandates safeguarding protected health information. A breach could result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update IBM Langflow OSS to the latest version beyond 1.10.3. Restrict access to the MCP `resources/read` endpoint by implementing authentication and authorization controls. Review and remove unnecessary file permissions on the server. Monitor for suspicious activity and consider isolating affected systems until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7646. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart