{"data":{"id":"a3dce035-d72f-4a79-83b7-53750dff26c4","title":"GHSA-79ph-745m-6wxq: Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint","summary":"Langflow's Knowledge Bases API, specifically the POST /api/v1/knowledge_bases endpoint, builds filesystem paths directly from the user-supplied name field without sanitization or containment checks. An authenticated attacker can use traversal sequences or absolute paths to create directories and write embedding_metadata.json and schema.json anywhere the application has write permissions, enabling cross-user data compromise, arbitrary directory creation, and overwriting of existing knowledge base files.","solution":"Fixed in PR #12337, which adds the _validate_kb_path_containment() helper using Path.is_relative_to() and applies it before any filesystem operations. Regression tests confirm traversal payloads return 403 Forbidden.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-79ph-745m-6wxq","publishedAt":"2026-06-16T17:35:09.000Z","cveId":"CVE-2026-42867","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langflow@<= 1.8.4 (fixed: 1.9.0)"],"affectedPackageNames":["langflow"],"affectedPackageRefs":["pypi:langflow"],"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00466,"epssCheckedAt":"2026-11-04T12:08:35.001Z","kevDateAdded":null,"advisoryAliases":["GHSA-79ph-745m-6wxq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T17:35:09.000Z","fixReleasedAt":"2026-04-14T22:39:34.554Z","daysToFix":-63,"fixCheckedAt":"2026-10-29T21:34:34.753Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langflow","fixedVersion":"1.9.0","matchedVersion":"1.9.0","fixReleasedAt":"2026-04-14T22:39:34.554Z","daysToFix":-63,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:34.604Z"}]}}