Path traversal in IBM Langflow OSS APIRequest component (CVE-2026-8859)

A path traversal vulnerability exists in the APIRequest component of IBM Langflow OSS when the "Save to File" feature is enabled. Filenames extracted from HTTP response Content-Disposition headers are not sanitized before being joined to the temporary directory path, allowing an attacker-controlled HTTP server to write files to arbitrary paths accessible by the Langflow process. In the official Docker image, this could be escalated to remote code execution by writing malicious .pth files to the site-packages directory, which would execute on the next container restart. Affected versions: - 1.0.0-1.10.0 We recommend updating to: 1.10.1. CVSS 9.9 · our assessment: act_now Vendor advisory: https://www.ibm.com/support/pages/node/7278924 Details: https://vuln.today/cve/CVE-2026-8859