Langflow: Path Traversal in Langflow Knowledge Bases API
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2026-42048. PoCs published by EQSTLab, dwisiswant0.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2026-42048, a path traversal vulnerability in Langflow before 1.9.0. The exploit demonstrates arbitrary directory deletion via the bulk delete endpoint `/api/v1/knowledge_bases` by manipulating the `kb_names` parameter.
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). This occurs because user-supplied knowledge base names are concatenated directly into file paths without proper sanitization or boundary validation. An authenticated attacker can exploit this flaw to delete arbitrary directories anywhere on the server's filesystem, leading to data loss and potential service disruption. This vulnerability is fixed in 1.9.0.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2026-42048, a path traversal vulnerability in Langflow before 1.9.0. The exploit demonstrates arbitrary directory deletion via the bulk delete endpoint `/api/v1/knowledge_bases` by manipulating the `kb_names` parameter.
The repository contains a functional exploit for CVE-2026-42048, demonstrating path traversal in Langflow's Knowledge Bases API. The exploit leverages insecure path concatenation in `create_knowledge_base` and `delete_knowledge_bases_bulk` endpoints to create and delete arbitrary directories on the server.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H