CVE-2026-18899: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal.

IBM Langflow OSS (an open-source tool for building AI applications) versions 1.0.0 through 1.11.1 has a vulnerability that allows an attacker to read files they shouldn't have access to through path traversal (a technique where attackers use special file path sequences like "../" to escape intended directories and access restricted files on the system).