CVE-2026-48520: CWE-73: External Control of File Name or Path in langflow-ai langflow
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.
AI Analysis
Technical Summary
CVE-2026-48520 is an external control of file name or path vulnerability (CWE-73) in langflow-ai's langflow product. The issue exists in the Shareable Playground (Public Flows) feature prior to version 1.10.0, where making a flow public allows execution requests to specify a list of files to be read. These file paths can point to local or S3 storage locations depending on configuration, enabling arbitrary file reads. This vulnerability is resolved in langflow version 1.10.0.
Potential Impact
An attacker can cause the application to read arbitrary files from local or S3 storage by specifying file paths in execution requests to public flows. This can lead to disclosure of sensitive information contained in those files. The vulnerability does not impact integrity or availability but has high confidentiality impact. No known exploits are reported in the wild.
Mitigation Recommendations
A patch is available and the vulnerability is fixed in langflow version 1.10.0. Users should upgrade to version 1.10.0 or later to remediate this issue. Since this is a cloud service, the vendor likely manages remediation for hosted instances; users should verify with the vendor that their environment is updated accordingly.
CVE-2026-48520: CWE-73: External Control of File Name or Path in langflow-ai langflow
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.
CVSS v3.1
Score 6.1medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-48520 is an external control of file name or path vulnerability (CWE-73) in langflow-ai's langflow product. The issue exists in the Shareable Playground (Public Flows) feature prior to version 1.10.0, where making a flow public allows execution requests to specify a list of files to be read. These file paths can point to local or S3 storage locations depending on configuration, enabling arbitrary file reads. This vulnerability is resolved in langflow version 1.10.0.
Potential Impact
An attacker can cause the application to read arbitrary files from local or S3 storage by specifying file paths in execution requests to public flows. This can lead to disclosure of sensitive information contained in those files. The vulnerability does not impact integrity or availability but has high confidentiality impact. No known exploits are reported in the wild.
Mitigation Recommendations
A patch is available and the vulnerability is fixed in langflow version 1.10.0. Users should upgrade to version 1.10.0 or later to remediate this issue. Since this is a cloud service, the vendor likely manages remediation for hosted instances; users should verify with the vendor that their environment is updated accordingly.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-21T16:18:10.619Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
Threat ID: 6a3ab6d9eed863c81e4f9e97
Added to database: 06/23/2026, 16:39:53 UTC
Last enriched: 06/30/2026, 23:17:59 UTC
Last updated: 08/06/2026, 12:41:11 UTC
Views: 47
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.