CVE-2026-8183

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3

Description A remote attacker can perform directory traversal on the system. By sending a specially crafted URL request containing dot-dot-slash (/../) sequences, an attacker can view arbitrary files on the system. Directory traversal is a method used to access files and directories that are stored outside the web root folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.