CVE-2026-7667: IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacke

IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.0 has a vulnerability where an authenticated attacker (someone with login access) can create a malicious flow pointing to a URL they control, which returns a specially crafted header that tricks the system into writing files to any location on the server. This works because the system doesn't properly validate file paths, allowing an attacker to use path traversal (using sequences like '../' to escape the intended directory) to write files anywhere the Langflow process can access.