What is the CVSS score of CVE-2026-8183?

CVE-2026-8183 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.4%.

Which versions of IBM Langflow OSS are affected by CVE-2026-8183?

IBM Langflow OSS (versions 1.0.0-1.10.3) creates an insider threat vector by allowing any authenticated user to harvest system credentials and keys through path traversal attacks.. A patch is available.

How to fix or mitigate CVE-2026-8183?

Within 24 hours, inventory all systems running IBM Langflow OSS versions 1.0.0 through 1.10.3 and assess whether each instance processes sensitive data, credentials, or configuration files. Within 7 days, apply the vendor-released patch referenced in IBM advisory node/7282647, upgrading all instances to the latest patched version across development, staging, and production environments. Within 30 days, verify successful patch deployment on all systems, analyze authentication logs from the vulnerable period for suspicious file-access patterns originating from low-privileged accounts, and deploy network segmentation or IP-based access controls to limit Langflow instance connectivity to authorized users only.

IBM Langflow OSS CVE-2026-8183

EUVD-2026-53554 HIGH

Path Traversal (CWE-22)

2026-08-05 ibm

GHSA-p865-qggm-g9qx

IBM Path Traversal Langflow Oss

7.7

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

vuln.today AI

7.7 HIGH

Network-exploitable path traversal requiring only a low-privileged account; scope change to host FS confirmed; no integrity or availability impact described.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 05, 2026 - 18:47 vuln.today

CVE Published

Aug 05, 2026 - 18:23 cve.org

HIGH 7.7

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to v i ew arbitrary files on the system.

AnalysisAI

Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.3 enables authenticated remote attackers to read arbitrary files on the underlying system by submitting URLs containing dot-dot sequences (/../). The CVSS scope change metric (S:C) confirms that exploitation reaches beyond the application's own directory boundary, exposing system-level files such as credentials, configuration, or private keys to any low-privileged account holder. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Obtain low-privileged Langflow account

Delivery

Craft HTTP request with dot-dot path sequences

Exploit

Submit request to vulnerable endpoint

Execution

Application fails to canonicalize path

Persist

Server reads file outside application directory

Impact

Return arbitrary system file contents to attacker

Access

Obtain low-privileged Langflow account

Delivery

Craft HTTP request with dot-dot path sequences

Exploit

Submit request to vulnerable endpoint

Execution

Application fails to canonicalize path

Persist

Server reads file outside application directory

Impact

Return arbitrary system file contents to attacker

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid low-privileged authenticated session on the IBM Langflow OSS instance - unauthenticated access is not sufficient per the CVSS PR:L metric. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 7.7 High with vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N reflects a meaningful real-world threat: any authenticated low-privileged user can trigger this over the network with no interaction required and low complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker with a low-privileged IBM Langflow OSS account crafts an HTTP request to a vulnerable endpoint substituting normal path components with sequences such as '/../../etc/shadow' or similar traversal strings targeting sensitive host OS files. The server processes the request without proper path canonicalization and returns the file contents in the response. …
Remediation	Apply the vendor-released patch per IBM's security advisory at https://www.ibm.com/support/pages/node/7282647. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all systems running IBM Langflow OSS versions 1.0.0 through 1.10.3 and assess whether each instance processes sensitive data, credentials, or configuration files. …

Threat intelligence, references, and detailed analysis are available after sign-in.