CVE-2026-7646

MediumCVSS 6.5/10Last modified Oct 24, 2026

Description

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Aug 5, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-7646010.0A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. CVE-2026-764619.8A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacke CVE-2026-764625.5A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an CVE-2026-764638.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764649.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764659.8A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Swi CVE-2026-764669.8A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network acce CVE-2026-764677.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764688.2As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764697.4As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-76478.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due t CVE-2026-764708.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr