CVE-2026-97677: IBM Langflow OSS arbitrary file write and read by authenticated flow authors

Summary

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a flaw that lets an authenticated flow author write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. A crafted on-disk index can also let the attacker read arbitrary files the service process can access, including configuration files, secrets, or database files under the application's data directory.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News