CVE-2026-14470
MEDIUM NVDCVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Sep 04, 2026
Description
IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.