CVE-2026-104312: Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file write on the victim's host.
Other sources
Langflow OSS could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file write on the victim's host.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.12.4 - Operational
Back up the existing Langflow OSS installation before upgrading, then test your flows after installing version 1.12.4.
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Users of IBM Langflow OSS versions 1.0.0 through 1.12.3 are exposed when an authenticated attacker can generate an archive and a victim extracts that ZIP with a tool that does not sanitize archive entry paths.
What does an attacker need to exploit this issue?
The attacker needs an authenticated Langflow OSS account and must persuade or otherwise cause a victim to extract the server-generated ZIP archive using a non-sanitizing extraction tool.
What is the impact on the victim system?
A crafted ZIP can contain paths that traverse outside the intended extraction directory. When extracted unsafely, this can result in arbitrary file writes on the victim's host.