Lucene search
K

CVE-2026-5027

๐Ÿ—“๏ธย 28 Mar 2026ย 16:59:30Reported byย redhat.comTypeย 
redhatcve
ย redhatcve
๐Ÿ”—ย access.redhat.com๐Ÿ‘ย 2ย Views

The POST /api/v2/files endpoint does not sanitize the filename, allowing path traversal to arbitrary filesystem locations.

Related
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for CVE-2026-5027
3 Apr 202609:48
โ€“githubexploit
ATTACKERKB
CVE-2026-5027
27 Mar 202614:54
โ€“attackerkb
Circl
CVE-2026-5027
27 Mar 202617:23
โ€“circl
CNNVD
Langflow ๅฎ‰ๅ…จๆผๆดž
27 Mar 202600:00
โ€“cnnvd
CVE
CVE-2026-5027
27 Mar 202614:54
โ€“cve
Cvelist
CVE-2026-5027 Langflow - Path Traversal Arbitrary File Write via upload_user_file
27 Mar 202614:54
โ€“cvelist
EUVD
EUVD-2026-16668
27 Mar 202615:30
โ€“euvd
NVD
CVE-2026-5027
27 Mar 202615:17
โ€“nvd
Packet Storm
๐Ÿ“„ Langflow 1.8.4 File Write / Traversal / Remote Code Execution
2 Apr 202600:00
โ€“packetstorm
Packet Storm
๐Ÿ“„ Langflow 1.8.4 Traversal / Remote Code Execution
23 Apr 202600:00
โ€“packetstorm
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Mar 2026 16:59Current
6Medium risk
Vulners AI Score6
CVSS 3.18.8
EPSS0.00035
SSVC
2