CVE-2026-42048: Langflow path traversal in Knowledge Bases API DELETE endpoint

Summary

CVE-2026-42048 affects Langflow versions prior to 1.9.0 in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). User-supplied knowledge base names are concatenated directly into file paths without sanitization or boundary validation. An authenticated attacker can delete arbitrary directories on the server's filesystem, causing data loss and potential service disruption.

Mitigation

Fixed in 1.9.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• langflowPyPIReaches an LLM package through dependencies

Related items

• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
• CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek