Is CVE-2026-14470 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14470?

CVE-2026-14470 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-14470

Description

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.