CVE-2026-19303: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or dir
Summary
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.11.2 has a vulnerability where an authenticated attacker (someone with valid login credentials) can delete any files or folders on the server because the software doesn't properly restrict which directories users can access. This happens because the application fails to limit file paths (the addresses of files on disk) to only safe, intended locations.
Vulnerability Details
8.1(high)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
network
low
low
none
September 4, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19303
First tracked: September 4, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 85%