{"id":"CVE-2026-97677","aliases":[],"cve":{"records":[{"id":"CVE-2026-97677","source":"ibm","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-24T20:47:33.186Z","published":"2026-11-08T18:49:21.372Z","modified":"2026-11-10T04:56:02.746Z"}],"publishers":[{"name":"ibm","role":"CNA","organizationId":"9a959283-ebb5-44b6-b705-dcc2bbced522","modified":"2026-11-08T18:49:21.372Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T04:56:02.746Z"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7290694","tags":["vendor-advisory","patch"],"source":"ibm"}],"weaknesses":[{"id":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","source":"ibm"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Langflow OSS is affected by multiple vulnerabilities","titleSource":"ibm","descriptionSource":"ibm","description":"IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk index, the attacker could also read the contents of arbitrary files accessible to the service process — including configuration files, secrets, or database files stored under the application's data directory.","score":8.1,"severity":"high","published":"2026-11-08T18:49:21.372Z","modified":"2026-11-10T04:56:02.746Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"IBM","name":"Langflow OSS","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.12.2","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:langflow_oss:1.12.2:*:*:*:*:*:*:*"],"source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-97677"}],"remediation":[{"text":"IBM strongly recommends addressing the vulnerability now by upgrading  Langflow OSS to version 1.12.3. https://pypi.org/project/langflow/#description","source":"ibm","url":"https://www.cve.org/CVERecord?id=CVE-2026-97677"}],"references":["https://www.ibm.com/support/pages/node/7290694"],"sources":[{"name":"CVE","id":"CVE-2026-97677","modified":"2026-11-10T04:56:02.746Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-97677"}],"assessments":[{"source":"ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","score":8.1}],"sourceAffected":[],"observedAt":"2026-11-10T05:06:17.286Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T21:25:33.720Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-08T19:20:34.372Z","attemptedAt":"2026-11-08T19:20:34.372Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-08T19:20:34.680Z","attemptedAt":"2026-11-08T19:20:34.680Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-08T19:20:35.143Z","attemptedAt":"2026-11-08T19:20:35.143Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-08T19:20:34.395Z","attemptedAt":"2026-11-08T19:20:34.395Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-97677","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97677","modified":"2026-11-08T19:17:54.203","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","checkedAt":"2026-11-08T19:20:34.372Z"}],"aiSummary":{"text":"IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a path traversal vulnerability, allowing an authenticated flow author to write files and read arbitrary files accessible to the service process. The attacker must have access to the service account. This bypasses local file access isolation safeguards.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-08T19:21:06.045Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-97677"}]}}