CVE-2026-51888

Received Received - Intake

Path Traversal in Langflow AI

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: MITRE

Description

langflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file write outside the intended workspace or storage boundary.. The component is: src/backend/base/langflow/api/v1/knowledge_bases.py:knowledge_bases-create_knowledge_base-a-live-http-post-to-create-knowledge-base. The attack vector is: Attack surface: HTTP or browser-backed service path. A public-facing upload or HTTP route handler forwards an attacker-controlled path or filename into host file creation without any visible boundary enforcement. ¶¶ A weakness has been identified in langflow-ai langflow up to 1.8.4. langflow contains an absolute path traversal vulnerability in knowledge_bases-create_knowledge_base-a-live-http-post-to-create-knowledge-base (src/backend/base/langflow/api/v1/knowledge_bases.py:51). An attacker can write or overwrite files outside the intended working directory by providing absolute paths in the knowledge base creation endpoint.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-01

Last Modified

2026-10-01

Generated

2026-10-02

AI Q&A

2026-10-02

EPSS Evaluated

N/A

NVD

CVE-2026-51888

Affected Vendors & Products

Vendor	Product	Version / Range
langflow-ai	langflow	to 1.8.4 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a Directory Traversal issue in langflow-ai langflow v1.8.4. It allows attackers to write or overwrite files outside the intended workspace by exploiting a path traversal flaw in the knowledge base creation endpoint. The attack vector is through a public-facing HTTP or browser service that forwards attacker-controlled paths into file creation without proper boundary checks.

Detection Guidance

To detect this vulnerability, monitor HTTP POST requests to the /api/v1/knowledge_bases endpoint in langflow v1.8.4 or earlier. Look for requests containing absolute file paths in parameters that could indicate directory traversal attempts. Check server logs for unusual file creation outside the intended workspace directory.

Impact Analysis

This vulnerability can lead to arbitrary file writes outside the intended storage area. Attackers could overwrite critical system files, inject malicious code, or corrupt data. If the service runs with elevated privileges, the impact could extend to system compromise or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized file access or modification. GDPR may be impacted if personal data files are exposed or altered. HIPAA could be breached if protected health information is compromised. Organizations may face penalties for failing to protect sensitive data due to insufficient file access controls.

Mitigation Strategies

Immediately upgrade langflow to a version that patches this vulnerability. If upgrading is not possible, restrict access to the /api/v1/knowledge_bases endpoint via network controls. Implement strict input validation to reject absolute paths in file creation parameters. Monitor for any unauthorized file writes outside the workspace directory.

Hi! I’m here to help you understand CVE-2026-51888. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70