CVE-2026-14470: IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An at

IBM Langflow OSS versions 1.0.0 through 1.10.2 has a vulnerability that lets an authenticated attacker (someone with login credentials) access files they shouldn't be able to see. The attacker does this by using special URL sequences like '/../' (called path traversal, a technique where attackers navigate to parent directories to escape restricted folders) to trick the system into showing arbitrary files stored on the server.