CVE-2026-42867

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without...

CVE-2026-42867

creationtimestamp| type| source ---|---|--- 2026-06-11 19:24:18+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-79ph-745m-6wxq...