CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 through 1.10.2 are vulnerable to a path traversal issue that could enable remote authenticated attackers to access sensitive information by bypassing directory restrictions. Organizations using these versions should prioritize patching to mitigate the risk of data exposure. This vulnerability is particularly relevant for security teams managing IBM Langflow deployments.
CVE
CVE-2026-17622
Severity
MEDIUM
CVSS
6.5
EPSS
0.49%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Related CVEs
Other vulnerabilities affecting the same vendor(s)