CVE-2026-18899

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.1

Description A path traversal issue exists that could allow a remote attacker to read arbitrary files from the system. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations Update IBM Langflow OSS to a version later than 1.11.1.