{"id":"CVE-2026-51888","published":"2026-10-01T22:17:03.527","lastModified":"2026-10-06T15:17:18.300","description":"langflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file write outside the intended workspace or storage boundary.. The component is: src/backend/base/langflow/api/v1/knowledge_bases.py:knowledge_bases-create_knowledge_base-a-live-http-post-to-create-knowledge-base. The attack vector is: Attack surface: HTTP or browser-backed service path. A public-facing upload or HTTP route handler forwards an attacker-controlled path or filename into host file creation without any visible boundary enforcement. ¶¶ A weakness has been identified in langflow-ai langflow up to 1.8.4. langflow contains an absolute path traversal vulnerability in knowledge_bases-create_knowledge_base-a-live-http-post-to-create-knowledge-base (src/backend/base/langflow/api/v1/knowledge_bases.py:51). An attacker can write or overwrite files outside the intended working directory by providing absolute paths in the knowledge base creation endpoint.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/c85f513d1fd702c686cffe061cbf8ef5","tags":[]},{"url":"https://gist.github.com/Ro1ME/c85f513d1fd702c686cffe061cbf8ef5","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/c85f513d1fd702c686cffe061cbf8ef5","tags":[]},{"url":"https://gist.github.com/Ro1ME/c85f513d1fd702c686cffe061cbf8ef5","tags":[]}],"hasPoc":true,"ai":{"summary":"The langflow AI application has a directory traversal vulnerability in its knowledge base creation endpoint that allows attackers to write files outside the intended workspace, potentially leading to arbitrary file overwrites or writes.","exploitability":"Exploitation is straightforward requiring only a single HTTP POST request to the vulnerable endpoint with an absolute path in the filename parameter, with no authentication required.","blast_radius":"If exploited, this vulnerability could allow attackers to overwrite critical application files, configuration files, or even inject malicious code into the system, potentially leading to full system compromise.","remediation":"Upgrade to langflow version 1.8.5 or later to address the directory traversal vulnerability in the knowledge base creation endpoint.","detection":"Monitor for HTTP POST requests to /api/v1/knowledge_bases with absolute paths in filename parameters, particularly those containing path traversal sequences like '../' or '/etc/', and check for file system write operations outside the intended workspace directory.","tags":["directory-traversal","web","file-write","http"],"model":"garnet-coder","analyzedAt":"2026-10-12T09:05:26.614Z"}}