CVE-2026-97677

IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a path traversal vulnerability (CWE-22 ) where an authenticated flow author can bypass local file access isolation safeguards. This allows the attacker to write controlled content into any directory writable by the service account a...