{
 "id": "AIR-2026-1353",
 "slug": "ibm-langflow-oss-vulnerable-to-unauthorized-file-access",
 "title": "IBM Langflow OSS vulnerable to unauthorized file access",
 "summary": "IBM Langflow OSS contains an improper access control flaw in the File component that lets authenticated users read arbitrary files from other users' storage namespaces. The issue arises due to missing ownership verification on advanced flow execution endpoints.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "IBM Langflow OSS"
 ],
 "incident_date": "2026-09-10",
 "incident_date_precision": "day",
 "first_reported": "2026-09-10",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9225",
   "publisher": "NVD",
   "title": "CVE-2026-9225: IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other…",
   "published_at": "2026-09-10"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-9225",
  "langflow",
  "path-traversal"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}