{"data":{"id":"6387c93a-1246-42af-a094-0eacf1315567","title":"CVE-2026-19306: IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesyste","summary":"IBM Langflow OSS versions 1.0.0 through 1.11.2 have a vulnerability where authenticated attackers (users with login access) can read any file on the server by tricking the system into treating file paths as input, exposing sensitive data like secret keys (cryptographic material used to secure the system) and databases. The vulnerability bypassed a security setting meant to prevent local file access, specifically in the component that handles chat message attachments sent to language models.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19306","publishedAt":"2026-09-04T16:17:24.793Z","cveId":"CVE-2026-19306","cweIds":["CWE-22"],"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-04T16:17:24.793Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}