← All advisories

Medium severity6.5NVD Advisory· Published Sep 10, 2026· Updated Sep 16, 2026

CVE-2026-79725

CVE-2026-79725

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Langflow AI/Langflow
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Range: >=1.0.0,<1.11.6
IBM/Langflow OSSllm-fuzzy
Range: 1.0.0 - 1.11.5

Patches

Vulnerability mechanics

References

1

www.ibm.com/support/pages/node/7286657nvdVendor Advisory

News mentions

1

IBM Langflow OSS: Batch of 18 Vulnerabilities Disclosed, Including Critical Code Execution Flaws
Vypr Intelligence · Sep 10, 2026