CVE-2026-5027 Langflow /api/v2/files Path Traversal Exploitation

Ankit Mehta@Secvyn

•updated Sep 28, 2026•0•0•5

This rule detects attempts to exploit CVE-2026-5027 in Langflow by identifying path traversal sequences (such as '../', '..\', or absolute paths) within the query parameters of requests directed to the '/api/v2/files' endpoint.