MediumVulnerability
CVE-2026-9138: IBM Langflow OSS arbitrary file write through SaveToFileComponent
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-9138
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
IBM Langflow OSS versions 1.0.0 through 1.11.2 contain a flaw in SaveToFileComponent where local file paths are built from attacker-controlled input without sufficient sanitization. An authenticated attacker with low privileges, such as a valid API key or user session, can send crafted paths to the /api/v1/run/{flow_id} endpoint, including absolute paths or path traversal sequences, to write or modify files in locations the Langflow process can write to. Successful exploitation may enable further compromise depending on the deployment environment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
- HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
- HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database
- HighCVE-2026-122133: Mistral Vibe untrusted search path code execution via git.exe on WindowsSimilar attack · NVD/CVE Database
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database