SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-19303

HIGH · CVSS 8.1 EPSS 0.39%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

IBM Langflow OSS versions 1.0.0 to 1.11.2 are vulnerable to a path traversal flaw that enables remote authenticated attackers to delete arbitrary local files or directories. This could lead to significant data loss and system disruption. Organizations using affected versions should prioritize remediation to safeguard their systems against potential exploitation.

CVE
CVE-2026-19303
Severity
HIGH
CVSS
8.1
EPSS
0.39%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-91734 HIGH CVE-2026-91727 HIGH CVE-2026-91712 HIGH CVE-2026-86917 HIGH CVE-2026-86905 MEDIUM CVE-2026-86904 HIGH