GHSA-9WHX-C884-C68Q Langflow Knowledge Bases API is Vulnerable to Path Traversal
Summary Langflow is vulnerable to Path Traversal in the Knowledge Bases API DELETE /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are concatenated directly into file paths without proper sanitization or boundary validation. An authenticated attacker can exploit thi...