CVE-2026-9138: IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the ser

IBM Langflow OSS versions 1.0.0 through 1.11.2 have a vulnerability where an authenticated attacker can write arbitrary files (any file they choose) to the server. The problem occurs because the SaveToFileComponent doesn't properly validate user input when processing requests, allowing attackers to use path traversal (special sequences that navigate to different directories) to write files outside the intended location.