CVE-2026-8859: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations

IBM Langflow OSS versions 1.0.0 through 1.10.0 has a path traversal vulnerability (a flaw where an attacker can escape the intended directory using sequences like ../ to access other folders) in the "Save to File" feature. An attacker controlling an external server can trick the system into writing files to unintended locations by sending crafted filenames in HTTP response headers, potentially allowing them to overwrite or create files anywhere the Langflow application can access.