Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-7528

Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS

Description

IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Langflow OSS

  • 1.0.0 to ≤ 1.9.0affected

References