Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-7667
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 17, 2026
- Source last modified
- October 24, 2026
Description
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename="../../../target/path" ), enabling arbitrary file write operations with attacker-controlled content to any path accessible by the Langflow process.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models by connecting steps into workflows. This flaw affects versions 1.0.0 through 1.10.0. Someone who already has an account on your Langflow could build a harmful workflow that connects to a web server they control. That server sends back a specially crafted reply that makes Langflow save a file with content the attacker chooses, in any folder the Langflow program is allowed to write to. This flaw is rated High.
What to do
- The person who installed or runs Langflow for your organization should act on this flaw.
- If an IT provider or vendor runs Langflow for you, send them this advisory and ask when the update will be done.
- Check which version of Langflow you are running. Versions
1.0.0through1.10.0are affected by this flaw. - No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it as soon as it is available.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.