IBM Langflow OSS <1.10.3 Arbitrary File Read via Res/Read Path Trv
CVE-2026-7646 Published on August 5, 2026
Langflow is affected by security vulnerabilities in Model Context Protocol features
IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.
Vulnerability Analysis
CVE-2026-7646 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2026-7646 has been classified to as a Directory traversal vulnerability or weakness.
Products Associated with CVE-2026-7646
Want to know whenever a new CVE is published for IBM Langflow Oss? stack.watch will email you.
Affected Versions
IBM Langflow OSS:- Version 1.0.0, <= 1.10.3 is affected.