CVE-2025-68478
High · 7.1External Control of File Name or Path in Langflow
CVSS
7.1
EPSS
5.8%
Published
Dec 19, 2025
CISA due date
—
The record
**Vulnerability Overview** If an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. **Vulnerable Code** 1. It receives the request body (flow), updates the DB, and then passes it to the file-writing sink.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | langflow | 0 | 1.7.1 |
Related vulnerabilities
- GHSA-f43r-cc68-gpx4 External Control of File Name or Path in Langflow Same vulnerability
- GHSA-3645-fxcv-hqr4 Langflow has Remote Code Execution in CSV Agent Also affects langflow
- CVE-2026-27966 Langflow is a tool for building and deploying AI-powered agents and workflows. Also affects langflow
- GHSA-g22f-v6f7-2hrh Langflow affected by Remote Code Execution via validate_code() exec() Also affects langflow
- CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote… Also affects langflow
- GHSA-c5cp-vx83-jhqx Langflow Missing Authentication on Critical API Endpoints Also affects langflow
- CVE-2026-21445 Langflow Missing Authentication on Critical API Endpoints Also affects langflow
- GHSA-5993-7p27-66g5 Langflow vulnerable to Server-Side Request Forgery Also affects langflow