Langflow: Langflow Knowledge Bases API is Vulnerable to Path Traversal
Langflow
More for Langflow RSS feed for Langflow
- Severity
- Critical, CVSS 9.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
- Record
- CVE-2026-42048
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 12, 2026
- Source last modified
- June 17, 2026
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). This occurs because user-supplied knowledge base names are concatenated directly into file paths without proper sanitization or boundary validation. An authenticated attacker can exploit this flaw to delete arbitrary directories anywhere on the server's filesystem, leading to data loss and potential service disruption. This vulnerability is fixed in 1.9.0.
Description quoted from the NVD record.
Who is affected
This flaw affects Langflow, a tool for building and running AI-powered agents and automated workflows. All versions before 1.9.0 are affected. The problem is in the feature for deleting knowledge bases. Langflow does not properly check the knowledge base name a user supplies, so someone who can log in to Langflow could use it to delete any folder anywhere on the server that runs it. That could cause data loss and could disrupt the service. This flaw is rated Critical.
What to do
- The person who installed or runs Langflow for your organization should find out which version is in use. Any version earlier than
1.9.0is affected. - Update Langflow to version
1.9.0or later, which fixes this flaw. If you run more than one copy of Langflow, update each one. - If an IT provider or vendor runs Langflow for your organization, send them this advisory and ask when the update to
1.9.0will be done. - After updating, check that Langflow shows version
1.9.0or later.
Analysis written from the source record as of June 17, 2026 and reviewed before publishing.