CVE-2026-42867

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (POST /api/v1/knowledge_bases). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server's filesystem. This vulnerability is fixed in 1.9.0.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/langflow-ai/langflow/pull/12337	Patch Issue Tracking
https://github.com/langflow-ai/langflow/security/advisories/GHSA-79ph-745m-6wxq	Exploit Vendor Advisory
https://github.com/langflow-ai/langflow/security/advisories/GHSA-79ph-745m-6wxq	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la 1.9.0, Langflow es vulnerable a salto de ruta en la API de Bases de Conocimiento (POST /api/v1/knowledge_bases). Esto ocurre porque los nombres de bases de conocimiento proporcionados por el usuario se utilizan directamente para crear rutas de archivo sin una sanitización o comprobaciones de contención adecuadas. Un atacante autenticado puede explotar esta falla para crear directorios y escribir archivos en cualquier lugar del sistema de archivos del servidor. Esta vulnerabilidad está corregida en la 1.9.0.

Information

Published : 2026-06-23 17:16

Updated : 2026-10-26 11:10

NVD link : CVE-2026-42867

Mitre link : CVE-2026-42867

CVE.ORG link : CVE-2026-42867

JSON object : View

Products Affected

langflow

langflow

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-42867", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42867", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-23T17:01:29.364041Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "langflow-ai", "product": "langflow", "versions": [{"status": "affected", "version": "< 1.9.0"}]}]}], "published": "2026-06-23T17:16:58.857", "references": [{"url": "https://github.com/langflow-ai/langflow/pull/12337", "tags": ["Patch", "Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-79ph-745m-6wxq", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-79ph-745m-6wxq", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (POST /api/v1/knowledge_bases). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server's filesystem. This vulnerability is fixed in 1.9.0."}, {"lang": "es", "value": "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la 1.9.0, Langflow es vulnerable a salto de ruta en la API de Bases de Conocimiento (POST /api/v1/knowledge_bases). Esto ocurre porque los nombres de bases de conocimiento proporcionados por el usuario se utilizan directamente para crear rutas de archivo sin una sanitizaci\u00f3n o comprobaciones de contenci\u00f3n adecuadas. Un atacante autenticado puede explotar esta falla para crear directorios y escribir archivos en cualquier lugar del sistema de archivos del servidor. Esta vulnerabilidad est\u00e1 corregida en la 1.9.0."}], "lastModified": "2026-10-26T11:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D51A889E-5C89-4A92-B32B-C91EAF735430", "versionEndExcluding": "1.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}