MediumVulnerability
CVE-2026-7646: IBM Langflow OSS path traversal via MCP resources/read request
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-7646
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
CVE-2026-7646 affects IBM Langflow OSS versions 1.0.0 through 1.10.3. A user can send a crafted MCP `resources/read` request containing a URL-encoded path traversal sequence in the filename, which lets them read arbitrary files from the server filesystem. The source lists the reachable data as other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables. The weakness is classified as CWE-22, and NVD had not yet provided an assessment at publication.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
- MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News
- HighCVE-2026-97677: IBM Langflow OSS arbitrary file write and read by authenticated flow authorsSimilar attack · NVD/CVE Database
- MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News