Vulnerability Bulletins |
CVE-2026-4502 |
|
| Affected software | IBM |
| IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-4502 | |