CVE-2026-13445

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1

Description An authenticated attacker can exploit the SaveToFile component to read and modify files uploaded by other users by specifying absolute paths to victim storage locations. When using append mode, the attacker can read the contents of a victim's file, append their own data, and upload a copy containing the victim's information to their own namespace. In overwrite mode, the attacker can replace the contents of a victim's file with arbitrary data, breaking the storage ownership boundary between users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.