CVE-2026-7658: IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path t

IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.3 has a vulnerability where the username field is not properly checked, allowing attackers to use path traversal (a technique to access files outside intended directories by using sequences like '../'). This flaw could let attackers delete files from any directory, destroy data belonging to other users, or remove JWT signing keys (cryptographic keys used to verify user sessions), which would invalidate all user sessions.