https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T19:37:44.820636+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2026-32376 cnvd-2026-32376 2026-10-03T19:37:44.858429+00:00 cnvd-2026-32376 https://vulnerability.circl.lu/vuln/fkie_cve-2026-7646 fkie_cve-2026-7646 2026-10-03T19:37:44.858606+00:00

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

 https://vulnerability.circl.lu/vuln/ghsa-x37c-x545-wrmw GHSA-x37c-x545-wrmw 2026-10-03T19:37:44.858768+00:00

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2619 WID-SEC-W-2026-2619 — IBM Langflow Desktop: Mehrere Schwachstellen 2026-10-03T19:37:44.858851+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu Manipulieren, und um Sicherheitsvorkehrungen zu umgehen.