IBM Langflow OSS CVE-2026-17622

Exploitation requires a valid authenticated account on the IBM Langflow OSS instance with at least low privilege (PR:L per CVSS vector). The instance must be network-accessible (AV:N). No user interaction by a victim is required. Affected versions are 1.0.0 through 1.10.2. What limits exploitation: an attacker must possess or obtain credentials; unauthenticated users cannot trigger the traversal. There is no indication of non-default configuration requirements - the flaw appears present in the default application state across the affected version range.

The CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) accurately reflects a moderate-severity read-only disclosure flaw requiring a valid low-privilege account - the authentication prerequisite meaningfully reduces the exposed attack surface compared to unauthenticated variants. No EPSS data was supplied, and the vulnerability is absent from CISA KEV, with no public proof-of-concept identified, which further tempers urgency. Real-world impact depends heavily on what files are accessible - server credentials, API keys, or internal configuration files stored near the web root could elevate the practical severity well beyond CVSS 6.5. Even a mid-sized municipal IT team in radom running an AI workflow platform internally should treat this as a priority patch given Langflow's typical access to model configurations and potentially sensitive pipeline data. The self-reporting posture by IBM suggests controlled disclosure with a patch ready, reducing the window for opportunistic exploitation.

An attacker with a valid low-privilege account submits an HTTP request to a Langflow OSS file-handling endpoint with a crafted path containing traversal sequences (e.g., '../../etc/passwd' or similar), causing the server to return the contents of an arbitrary file outside the intended directory. The low attack complexity suggests that once authenticated, exploitation requires minimal technical skill. No public proof-of-concept has been identified, but the straightforward nature of CWE-22 exploitation means weaponization would be rapid if credentials are obtained.