{"schemaVersion":3,"id":"CVE-2026-9225","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/{flow_id} endpoint, the application allows component inputs to reference storage paths using arbitrary user or flow identifiers without verifying ownership. An attacker with low‑privileged authenticated access can supply a crafted file path pointing to another user’s storage namespace, causing the backend to read and return the contents of files uploaded by other users. This vulnerability bypasses intended authorization checks enforced by the file management API and may result in unauthorized disclosure of sensitive user data.","dates":{"published":"2026-09-10T20:44:30.678Z","modified":"2026-09-11T14:50:41.553Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00349,"percentile":0.27236,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.131,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00218},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00229,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00229,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00349,"percentile":0.27236}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00218,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00349,"percentile":0.27236}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-639","name":"Authorization Bypass Through User-Controlled Key","description":"The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/639.html"}],"affected":[{"vendor":"ibm","product":"langflow oss","name":"Langflow OSS","label":"langflow oss","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0.0, ≤ 1.11.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, ≤ 1.11.5","eol":null,"hubHref":"/vendor/ibm/langflow_oss"},{"vendor":"langflow","product":"langflow","name":"Langflow","label":"langflow","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0.0, < 1.11.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, < 1.11.6","eol":null,"hubHref":"/vendor/langflow/langflow"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.ibm.com/support/pages/node/7286657","label":"www.ibm.com/support/pages/node/7286657","hostname":"www.ibm.com","tags":["Vendor Advisory","Patch"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-10T20:44:30.678Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-11T14:50:41.553Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T08:19:04.060Z","stale":false,"partial":false}}