IBM Langflow OSS: Arbitrary file read and write vulnerability (CVE-2026-97677)
IBM Langflow OSS versions 1.0.0 through 1.12.2 allow an authenticated flow author to bypass local file access isolation, enabling arbitrary file writes and unauthorized file reads.
CVE search metadata
CVE search record: CVE-2026-97677. Severity: high. CVSS: 8.1. KEV: no. Product: Langflow OSS (1.0.0 through 1.12.2). Brief: IBM Langflow OSS: Arbitrary file read and write vulnerability (CVE-2026-97677). Brief link: https://feed.craftedsignal.io/briefs/2026-11-ibm-langflow-oss-cve-2026-97677/
Triage facts
Revision 1- Applicability
- Langflow OSS (1.0.0 through 1.12.2)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 8, 21:27 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability where an authenticated flow author can bypass platform file isolation. This allows an attacker to write arbitrary content to any directory writable by the service account. Additionally, by using a crafted on-disk index, an attacker can read arbitrary files accessible to the service process, including configuration files, secrets, and database files.