CVE-2026-10700 | IBM Langflow OSS up to 1.8.4 File Handler API {file_name} flow_id/file_name access control

July 30, 2026 Yanac

A vulnerability was found in IBM Langflow OSS up to 1.8.4 and classified as problematic. Affected is an unknown function of the file /api/v1/files/images/{flow_id}/{file_name} of the component File Handler API. Such manipulation of the argument flow_id/file_name leads to improper access controls.

This vulnerability is listed as CVE-2026-10700. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More