Critical IBM Langflow Path Traversal Flaw

A critical path traversal vulnerability has been identified in IBM Langflow OSS, cataloged as CVE-2026-8859. This flaw, which carries a CVSS score of 9.9, affects all versions from 1.0.0 through 1.10.0 and allows an attacker to write arbitrary files to unintended locations on the host system.

What's at Risk

The vulnerability exists within the APIRequest component of IBM Langflow OSS. Organizations currently running versions 1.0.0 through 1.10.0 are at risk, particularly those that have the "Save to File" feature enabled. Any environment where Langflow is deployed in an internet-facing capacity is at a higher risk, as the exploit requires the ability to influence the HTTP response Content-Disposition header.

How the Flaw Works

This vulnerability is a classic example of path traversal, a weakness that occurs when an application fails to properly sanitize user-supplied input before using it to construct a file path. In general security terms, this class of vulnerability allows an attacker to escape the intended directory boundaries, often by using sequences like ../ (dot-dot-slash). By manipulating these paths, an attacker can coerce an application to overwrite sensitive configuration files, inject malicious code into executable directories, or place web shells in publicly accessible folders.

When an application processes external data—such as filenames from an HTTP response—without rigorous validation, it essentially grants the attacker control over the file system's write operations. This type of flaw is particularly dangerous because it does not necessarily require complex exploit chains; if the application process has sufficient permissions, the attacker can often place files anywhere the service account has write access.

How to Protect Your Systems

• Update immediately to a secure version of IBM Langflow OSS as provided by the vendor.
• Disable the "Save to File" feature if it is not strictly required for your operational workflow until patching is complete.
• Restrict network access to your Langflow instances; ensure they are not exposed directly to the public internet and are protected by a firewall or VPN.
• Implement the principle of least privilege for the service account running the Langflow process, ensuring it only has write access to the specific directories required for its function.
• Monitor system logs for unusual file creation events or attempts to access directories outside of the designated application paths.

Given the 9.9 CVSS severity rating, this vulnerability should be treated as a high-priority incident. The ability to write arbitrary files provides an attacker with a direct path to full system compromise, making prompt patching and the implementation of robust network segmentation essential to maintaining a secure environment.