---
id: CVE-2026-9138
title: >-
  IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated
  attacker to write arbitrary files to the server due to improper input
  validation in the SaveToFileComponent
summary: >-
  IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated
  attacker to write arbitrary files to the server due to improper input
  validation in the SaveToFileComponent. The application constructs local file
  paths using at…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-22
vendor: langflow
product: langflow
affected:
  - 'langflow >= 1.0.0, < 1.11.3'
patched:
  - langflow 1.11.3
published: '2026-09-04'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T21:17:53.760'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-9138'
references:
  - url: 'https://www.ibm.com/support/pages/node/7285643'
    label: psirt@us.ibm.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-10T20:38:48.950712Z'
epss: 0.00409
epssPercentile: 0.32376
ingestedAt: '2026-09-08T15:33:26.961Z'
---

## Overview

IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the server due to improper input validation in the SaveToFileComponent. The application constructs local file paths using attacker‑controlled input without sufficient sanitization when handling requests to the /api/v1/run/{flow_id} endpoint. An attacker with low‑privileged authenticated access (such as a valid API key or user session) can supply crafted path values, including absolute paths or path traversal sequences, allowing arbitrary file writes to locations writable by the Langflow process. Successful exploitation may lead to unauthorized file creation or modification, potentially resulting in further compromise depending on the deployment environment.

## Affected

- `langflow >= 1.0.0, < 1.11.3`

## Remediation

Upgrade past the affected range:

- `langflow 1.11.3`