CVE-2026-97677

A Langflow flow author could read and write outside the platform’s file boundary

IBM / Langflow · Langflow OSS local-file access isolation

First documented disclosure · Review checkpoint

Summary

An authenticated author could reach files accessible to the service account despite the platform’s local-file restrictions.

Severity and exploitation evidence

High · 8.1/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed public disclosures do not report exploitation in the wild.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

File destinations and paths used by an on-disk index could resolve outside the platform’s permitted storage area.

Conditions required

The user can author a flow in an affected installation. File access remains bounded by the service account’s operating-system permissions.

Potential impact

The user could read sensitive configuration or database files and change files writable by the service.

Affected versions and configurations

1.0.0 through 1.12.2.

Fix and mitigation status

1.12.3.

Practical next steps

Upgrade Langflow OSS to 1.12.3. Limit the service account’s access to files outside its working directories.

Operating lesson

Validate all resolved storage locations, including those referenced from indexes.

Evidence and limits

This is the file-isolation issue identified as CVE-2026-97677 in IBM’s multi-issue bulletin.

Sources