CVE-2026-33497— Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Public Exploits 1
Nuclei · 1 CVE-2026-33497.yaml [template]
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-33497
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Source: CVE Program / CVE List V5
Vulnerability Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the download_profile_picture function of the /profile_pictures/{folder_name}/{file_name} endpoint, the folder_name and file_name parameters are not strictly filtered, which allows the secret_key to be read across directories. Version 1.7.1 contains a patch.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Langflow 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Langflow是Langflow开源的一个用于构建多代理和 RAG 应用程序的可视化框架。 Langflow 1.7.1之前版本存在路径遍历漏洞，该漏洞源于/profile_pictures/{folder_name}/{file_name}端点参数过滤不严格，可能导致跨目录读取secret_key。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| langflow-ai | langflow | < 1.7.1 | - |
II. Public POCs for CVE-2026-33497
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Langflow < 1.7.1 contains a path traversal caused by insufficient filtering of folder_name and file_name parameters in download_profile_picture endpoint, letting attackers read secret_key across directories, exploit requires crafted request. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33497.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-33497
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-33497 (1)
Same Patch Batch · langflow-ai · 2026-03-24 · 4 CVEs total
| CVE-2026-33309 | 10.0 CRITICAL | Langflow has an Arbitrary File Write (RCE) via v2 API |
| CVE-2026-33475 | 9.1 CRITICAL | Langflow GitHub Actions Shell Injection |
| CVE-2026-33484 | 7.5 HIGH | Langflow has Unauthenticated IDOR on Image Downloads |
IV. Related Vulnerabilities
Same product: langflow
- CVE-2026-48520
Langflow: Unauthenticated Shareable Playground arbitrary loc - CVE-2026-33760
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enfor - CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation - CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint - CVE-2026-55423
Langflow: Logout button does not clear session
Same vendor: langflow-ai
- CVE-2026-48520
Langflow: Unauthenticated Shareable Playground arbitrary loc - CVE-2026-33760
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enfor - CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation - CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint - CVE-2026-55423
Langflow: Logout button does not clear session
Same weakness: CWE-22
- CVE-2026-14955
Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authe - CVE-2026-66007
Datasets Path Traversal via Unsanitized file_name Metadata - CVE-2026-66004
BlenderMCP Path Traversal via download_polyhaven_asset API - CVE-2026-15420
Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Tr - CVE-2026-16767
Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal
V. Comments for CVE-2026-33497
No comments yet