{"id":"CVE-2026-103360","published":"2026-10-07T01:16:34.087","lastModified":"2026-10-08T18:17:27.407","description":"IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-22"],"vendors":["langflow"],"products":["langflow"],"references":[{"url":"https://www.ibm.com/support/pages/node/7290694","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows authenticated attackers to access files outside of the intended directory through improper path handling, potentially exposing sensitive data like configuration files, credentials, or source code.","exploitability":"Exploitation requires an authenticated user account with access to the affected application, making it moderately difficult to exploit without prior access but achievable once credentials are obtained.","blast_radius":"If exploited, this vulnerability could lead to exposure of sensitive system information including database credentials, API keys, and application configuration files across all affected Langflow versions.","remediation":"Upgrade to langflow version 1.12.3 or later to remediate the path traversal vulnerability.","detection":"Monitor for unusual file access patterns in application logs, particularly when users request files with paths containing '../' sequences, and watch for access attempts to system directories like /etc/, /var/, or /home/ that should be restricted.","tags":["path-traversal","file-access","authenticated"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:57:35.491Z"}}