CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.10.2 are vulnerable to directory traversal attacks, enabling remote attackers to access arbitrary files on the system by sending specially crafted URL requests with "dot dot" sequences. This vulnerability could lead to unauthorized information disclosure, potentially exposing sensitive data. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
CVE
CVE-2026-17621
Severity
MEDIUM
CVSS
5.4
EPSS
0.29%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)