Security Advisory

CVE-2026-7658

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-05 18:20:40

Last updated 2026-08-05 19:42:27

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing key deletion leading to session invalidation.

← Browse all CVEs View on cve.org ↗