CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.10.1 are vulnerable to directory traversal attacks, enabling remote attackers to access arbitrary files by sending specially crafted URL requests with "dot dot" sequences. This vulnerability poses a significant risk as it may expose sensitive information on the system. Organizations using affected versions should prioritize remediation to mitigate potential data breaches.
CVE
CVE-2026-12942
Severity
HIGH
CVSS
7.5
EPSS
0.42%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)