CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Attackers can read sensitive files like secret keys via path traversal in the profile picture download endpoint of Langflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-33497?
CVE-2026-33497 is a high-severity path traversal vulnerability in Langflow Langflow, published on 24 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the download_profile_picture function of the /profile_pictures/{folder_name}/{file_name} endpoint, the folder_name and file_name parameters are not strictly filtered, which allows the secret_key to be read across directories. Version 1.7.1 contains a patch.
Weakness: CWE-22
Which versions are affected by CVE-2026-33497?
3 open source packages ship an affected version, including langflow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
langflow PyPI | All versions | 1.7.1 |
langflow PyPI | All versions | 1.7.1 |
langflow PyPI | All versions | 1.7.1 |
Products include Langflow Langflow.
How do I fix CVE-2026-33497?
Upgrade langflow to 1.7.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-33497 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-33497 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-ph9w-r52h-28p7, PYSEC-2026-81.