Insecure file path handling in IBM Langflow OSS (CVE-2026-13445)

CVE-2026-13445 affects IBM Langflow OSS and allows an authenticated attacker to exploit the SaveToFile component to read and modify other users' uploaded files by specifying absolute paths to victim storage locations. In append mode, the attacker can exfiltrate victim file contents; in overwrite mode, the attacker can replace victim file contents with arbitrary data. This constitutes a broken storage ownership boundary resulting in confidentiality and integrity breaches. Affected versions: - 1.0.0-1.10.1 We recommend updating to: 1.10.2. CVSS 8.1 · our assessment: this_week Vendor advisory: https://www.ibm.com/support/pages/node/7279990 Details: https://vuln.today/cve/CVE-2026-13445