CVE-2026-19303
⚠️ highSummary
IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory.
CVSS Score
8.1
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-09-04
First Seen: 2026-09-05
📊 Relative Risk Intelligence
This CVE is High Risk - more severe than 76.8% of all 353,061 vulnerabilities in our database.
#81,954
Top 25% most severe
Severity Percentile
Last Modified
2026-09-04
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE IDs (Weakness Types)