CVE-2026-33497
HIGH
GHSA-ph9w-r52h-28p7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionGitHub Advisory
Summary
In the download_profile_picture function of the /profile_pictures/{folder_name}/{file_name} endpoint, the folder_name and file_name parameters are not strictly filtered, which allows the secret_key to be read across directories.
Details
src/backend/base/langflow/api/v1/files.py
storage local get_file, directly concatenate flow_id and file_name !image
PoC
Impact
secret_key is used for jwt authentication. Attackers can forge authentication tokens and log into the system.
AnalysisAI
Path traversal in Langflow's /profile_pictures endpoint allows unauthenticated remote attackers to read the application's secret_key through directory traversal in the folder_name parameter. Since the secret_key is used for JWT authentication, attackers can forge valid tokens to gain unauthorized system access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Remote unauthenticated attacker can exploit the /profile_pictures/{folder_name}/{file_name} endpoint in Langflow by using path traversal (e.g., ../ sequences) in folder_name or file_name parameters to read arbitrary files including secret_key. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This vulnerability presents critical real-world risk despite the absence of formal CVSS scoring. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated remote attacker crafts a malicious HTTP request to the vulnerable endpoint using path traversal syntax, such as 'GET /api/v1/files/profile_pictures/../secret_key', to escape the intended directory and retrieve the JWT secret_key file from the application's file system. With the exfiltrated secret_key, the attacker generates valid JWT tokens for any user account including administrators, gaining full unauthorized access to the Langflow instance. … |
| Remediation | Immediately upgrade Langflow to the patched version specified in the GitHub security advisory at https://github.com/langflow-ai/langflow/security/advisories/GHSA-ph9w-r52h-28p7 or the corresponding National Vulnerability Database advisory at https://github.com/advisories/GHSA-ph9w-r52h-28p7. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running Langflow and assess exposure scope; isolate affected instances from production if possible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today