Live › vulnerability › CVE-2026-104312
IBM Langflow OSS versions 1.0.0 through 1.12.3 let an authenticated user produce a server-generated ZIP archive whose entry paths escape the extraction directory. If a victim extracts that archive with a tool that does not sanitize paths, files can be written anywhere on the victim's host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted Langflow OSS in the affected range where users can log in and trigger ZIP export. The risk to the server is limited; the main exposure is a victim who extracts the generated archive with an unsafe tool. unknown whether managed or hosted Langflow is affected.
No product ranges from the sources yet.
pip show langflow or the version shown in the Langflow UI, and see whether it falls in 1.0.0 through 1.12.3.1.12.3; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file write on the victim's host.
This page as .md · .json · in your agent: get_signal("CVE-2026-104312")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.