CVE-2026-7869

Analyzed Analyzed - Analysis Complete

Path Traversal in IBM Langflow OSS

Publication date: 2026-08-05

Last updated on: 2026-08-06

Assigner: IBM Corporation

Description

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw to create directories and write files anywhere on the server's filesystem.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-06

Generated

2026-08-18

AI Q&A

2026-08-05

EPSS Evaluated

2026-08-17

NVD

CVE-2026-7869

EUVD

EUVD-2026-53550

Affected Vendors & Products

Vendor	Product	Version / Range
langflow	langflow	From 1.0.0 (inc) to 1.11.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

IBM Langflow OSS versions 1.0.0 through 1.10.3 have a Path Traversal vulnerability in the Knowledge Bases API endpoint POST /api/v1/knowledge_bases. The issue arises because user-provided knowledge base names are used directly to construct file paths without proper validation or restrictions. This allows an authenticated attacker to traverse directories and write files to arbitrary locations on the server filesystem.

Detection Guidance

Check for unauthorized file creation or directory traversal attempts in logs, particularly for POST requests to /api/v1/knowledge_bases. Look for suspicious paths like ../../../ or absolute paths in knowledge base names.

Impact Analysis

An attacker with authenticated access could exploit this to create directories and write files anywhere on the server. This may lead to unauthorized data access, modification, or deletion, potential system compromise, or further attacks against the server or connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating confidentiality and integrity requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade IBM Langflow OSS to a version beyond 1.10.3. Implement input validation for knowledge base names to prevent path traversal. Restrict filesystem permissions to limit write access. Monitor for unusual file creation activities.

Hi! I’m here to help you understand CVE-2026-7869. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70