Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Record
- CVE-2026-13445
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 17, 2026
- Source last modified
- October 24, 2026
Description
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. In append mode, the attacker's workflow reads victim file contents, appends attacker-controlled data, and uploads a copy containing victim data to the attacker's namespace (confidentiality breach). In overwrite mode, the attacker can replace victim file contents with arbitrary data (integrity breach). This breaks the storage ownership boundary between users.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.10.1. It is in a building block that saves a workflow's output to a file. Someone who already has an account on your Langflow setup could use it to reach files that other users uploaded. They could copy another user's files into their own storage and read them, or replace the contents of those files with anything they choose. This breaks the separation that keeps each user's files private to that user. This flaw is rated High.
What to do
- The person who installed or runs Langflow for your organization, or the IT provider who manages it, should handle this flaw.
- Check which version of Langflow you run. Versions 1.0.0 through 1.10.1 are affected.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release and install it as soon as it is available.
- If an IT provider or vendor runs Langflow for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.