[ CVE-2026-77819 · Published 29 Oct 2026 ]
Vulnerability in IBM Langflow OSS
CVSS 6.5
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory.
[ Fixes ]Fixes and patches
- Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-4041
Langflow: Multiple vulnerabilities Translated from German
[ References ]References
- www.ibm.com/support/pages/node/7293015PatchVendor Advisory