CVE-2026-19306: IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesyste
Summary
IBM Langflow OSS versions 1.0.0 through 1.11.2 have a vulnerability where authenticated attackers (users with login access) can read any file on the server by tricking the system into treating file paths as input, exposing sensitive data like secret keys (cryptographic material used to secure the system) and databases. The vulnerability bypassed a security setting meant to prevent local file access, specifically in the component that handles chat message attachments sent to language models.
Vulnerability Details
7.7(high)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
network
low
low
none
September 4, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
CVE-2024-27444: langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19306
First tracked: September 4, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%