CVE-2026-9225

Awaiting Analysis Awaiting Analysis - Queue

Unauthorized File Access in IBM Langflow OSS

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/{flow_id} endpoint, the application allows component inputs to reference storage paths using arbitrary user or flow identifiers without verifying ownership. An attacker with low‑privileged authenticated access can supply a crafted file path pointing to another user’s storage namespace, causing the backend to read and return the contents of files uploaded by other users. This vulnerability bypasses intended authorization checks enforced by the file management API and may result in unauthorized disclosure of sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-9225

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	langflow	From 1.0.0 (inc) to 1.11.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated attacker with low privileges to access sensitive files uploaded by other users. It occurs because the application does not properly verify ownership when reading files through the /api/v1/run/advanced/{flow_id} endpoint, enabling unauthorized file access.

Detection Guidance

To detect this vulnerability, review logs for unauthorized access to the /api/v1/run/advanced/{flow_id} endpoint. Check for requests with crafted file paths referencing other users' storage paths. Monitor for unusual file read operations in application logs.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized disclosure of sensitive user data, including files containing confidential information. Attackers may steal or misuse data from other users, potentially causing privacy breaches or compliance violations.

Compliance Impact

This vulnerability may violate data protection regulations like GDPR and HIPAA by enabling unauthorized access to personal or sensitive health information. Organizations could face legal penalties, reputational damage, and loss of trust due to non-compliance with privacy requirements.

Mitigation Strategies

Upgrade IBM Langflow OSS to version 1.11.6 or later. Implement strict input validation for file paths in the /api/v1/run/advanced/{flow_id} endpoint. Restrict access to authenticated users with least privilege. Review and audit file access logs for suspicious activity.

Hi! I’m here to help you understand CVE-2026-9225. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70