https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:09:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-32374 cnvd-2026-32374 https://cve.radiocsirt.org/vuln/cnvd-2026-32374 https://cve.radiocsirt.org/vuln/euvd-2026-348933 EUVD-2026-348933 https://cve.radiocsirt.org/vuln/euvd-2026-348933 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7869 <p>IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server&#39;s filesystem.</p> <p>IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server&#39;s filesystem.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-7869 https://cve.radiocsirt.org/vuln/ghsa-7xr9-m7x2-5wqq <p>IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server&#39;s filesystem.</p> <p>IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server&#39;s filesystem.</p> https://cve.radiocsirt.org/vuln/ghsa-7xr9-m7x2-5wqq https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2675 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2675