CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.10.2 are vulnerable to directory traversal attacks, allowing authenticated users to exploit specially crafted URL requests with "dot dot" sequences to access arbitrary files on the system. This vulnerability could lead to unauthorized information disclosure, potentially exposing sensitive data. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.
CVE
CVE-2026-14470
Severity
MEDIUM
CVSS
6.5
EPSS
0.34%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)