CVE-2026-8183 is a high severity (CVSS 7.7) path traversal flaw in IBM Langflow OSS versions 1.0.0 through 1.10.3. A remote attacker could send a crafted URL with dot dot sequences to view arbitrary files on the system. IBM recommends upgrading to Langflow OSS 1.11.0 or newer.
What's affected
- Langflow OSS 1.0.0 through 1.10.3, per the IBM bulletin.
- Fixed: IBM recommends upgrading to Langflow OSS 1.11.0 or newer. IBM lists no workarounds.
- The same bulletin covers other Langflow issues, among them custom component code execution and credential exposure in public flows, so the upgrade closes several at once.
Record severity: CVSS 7.7 (high), vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. The weakness class is CWE-22, Path Traversal.
How to check if you're exposed
Run pip show langflow or pip list | grep -i langflow to read the version. In a container, check the image tag. Compare with 1.11.0. You can paste a lock file into the free scanner at gold.safeguard.sh/scan to find it in a project.
What to do now
- Find every Langflow deployment, including test servers.
- Upgrade to 1.11.0 or newer.
- Do not expose Langflow to the internet without authentication and a reverse proxy.
- Review stored API keys and tokens in flows, and rotate any that could have been read.
- Rebuild container images and redeploy.
Why it matters
Path traversal (CWE-22) happens when a request names a file and the server does not confine it to an intended folder. Dot dot sequences in a URL then step outside it. On an AI workflow server, the files on disk often include environment files and keys.
The CVSS vector shows a low privilege requirement and a changed scope with high confidentiality impact, so the main risk is reading secrets. The record does not mark the CVE as exploited in the wild. Langflow instances are often run quickly for experiments and forgotten, which makes an inventory the first step.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Which version fixes it?
IBM recommends Langflow OSS 1.11.0 or newer.
Does it let an attacker change files?
The description and vector describe viewing files, with confidentiality impact only.
Sources
To see where this and other CVEs sit in your own dependencies, try the free in-browser scan at gold.safeguard.sh/scan.
Last reviewed: 18 October 2026.
