IBM Langflow Desktop versions up to 1.8.4 contain a directory traversal vulnerability. A remote attacker can exploit this by sending a specially crafted URL with "dot dot" sequences (/../) to access arbitrary files on the affected system without authorization.