CVE-2026-51888 | langflow-ai Langflow up to 1.8.4 Knowledge Base Creation Endpoint knowledge_bases.py path traversal

October 1, 2026 Yanac

A vulnerability categorized as critical has been discovered in langflow-ai Langflow up to 1.8.4. Affected is the function knowledge_bases-create_knowledge_base-a-live-http-post-to-create-knowledge-base of the file src/backend/base/langflow/api/v1/knowledge_bases.py of the component Knowledge Base Creation Endpoint. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-51888. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More