CVE-2026-93448
6.5 MEDIUMPublished 2026-10-07 · Updated 2026-10-09
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Vendors
langflow
Products
langflow
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2014-125130PoC
- HIGHCVE-2017-20284
- HIGHCVE-2021-48011PoC
- HIGHCVE-2023-54403PoC
- MEDIUMCVE-2024-58386PoC
- HIGHCVE-2024-58387PoC
- HIGHCVE-2024-58388PoC
- MEDIUMCVE-2025-1280
Related by shared AI tags and CWE weakness class. Browse the full archive.