CVE-2026-17622

creationtimestamp| type| source ---|---|--- 2026-09-12 05:40:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117256460831734345 2026-09-12 05:50:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvcf4tyy4d2b...

Security Bulletin: Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

Summary Langflow uses filesystem path construction as part of several components and API endpoints, including the Directory component, the Knowledge Base connector ingestion endpoint, and the Knowledge Base flow component. In the Directory component, user-supplied path values are not validated...