CVE-2026-13445

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. In append mode, the attacker's workflow reads victim file contents, appends attacker-controlled data, and uploads a copy containing victim data to the attacker's namespace (confidentiality breach). In overwrite mode, the attacker can replace victim file contents with arbitrary data (integrity breach). This breaks the storage ownership boundary between users.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7279990	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) IBM Langflow OSS 1.0.0 hasta 1.10.1 puede permitir a un atacante autenticado explotar el componente SaveToFile para leer y modificar los archivos subidos de otro usuario especificando rutas absolutas que apuntan a ubicaciones de almacenamiento de la víctima. En modo de anexión, el flujo de trabajo del atacante lee el contenido del archivo de la víctima, añade datos controlados por el atacante y sube una copia que contiene datos de la víctima al espacio de nombres del atacante (violación de confidencialidad). En modo de sobrescritura, el atacante puede reemplazar el contenido del archivo de la víctima con datos arbitrarios (violación de integridad). Esto rompe el límite de propiedad del almacenamiento entre usuarios.

Information

Published : 2026-07-17 21:17

Updated : 2026-10-24 20:10

NVD link : CVE-2026-13445

Mitre link : CVE-2026-13445

CVE.ORG link : CVE-2026-13445

JSON object : View

Products Affected

linux

linux_kernel

langflow

langflow

microsoft

windows

apple

macos

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-13445", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13445", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_oss:1.10.1:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow OSS", "versions": [{"status": "affected", "version": "1.0.0", "versionType": "semver", "lessThanOrEqual": "1.10.1"}]}]}], "published": "2026-07-17T21:17:05.473", "references": [{"url": "https://www.ibm.com/support/pages/node/7279990", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. In append mode, the attacker's workflow reads victim file contents, appends attacker-controlled data, and uploads a copy containing victim data to the attacker's namespace (confidentiality breach). In overwrite mode, the attacker can replace victim file contents with arbitrary data (integrity breach). This breaks the storage ownership boundary between users."}, {"lang": "es", "value": "IBM Langflow OSS 1.0.0 hasta 1.10.1 puede permitir a un atacante autenticado explotar el componente SaveToFile para leer y modificar los archivos subidos de otro usuario especificando rutas absolutas que apuntan a ubicaciones de almacenamiento de la v\u00edctima. En modo de anexi\u00f3n, el flujo de trabajo del atacante lee el contenido del archivo de la v\u00edctima, a\u00f1ade datos controlados por el atacante y sube una copia que contiene datos de la v\u00edctima al espacio de nombres del atacante (violaci\u00f3n de confidencialidad). En modo de sobrescritura, el atacante puede reemplazar el contenido del archivo de la v\u00edctima con datos arbitrarios (violaci\u00f3n de integridad). Esto rompe el l\u00edmite de propiedad del almacenamiento entre usuarios."}], "lastModified": "2026-10-24T20:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "362B13B6-4992-423F-98D3-60056848503C", "versionEndExcluding": "1.10.2", "versionStartIncluding": "1.0.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}