What is the CVSS score of CVE-2026-7667?

CVE-2026-7667 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Which versions of IBM Langflow are affected by CVE-2026-7667?

IBM Langflow OSS versions 1.0.0-1.10.0 allow authenticated users to write arbitrary files to the server, enabling full compromise through code injection, credential theft, and configuration…. A patch is available.

How to fix or mitigate CVE-2026-7667?

Within 24 hours: inventory all deployments of Langflow 1.0.0-1.10.0, verify vendor-patch availability, and identify patching windows aligned with operational schedules. Within 7 days: test the patch in a staging environment and deploy to all production systems. Within 30 days: verify patch deployment across all systems and audit access logs from the preceding 90 days for evidence of exploitation, including unusual file writes or flow creation.

IBM Langflow CVE-2026-7667

HIGH

Path Traversal (CWE-22)

2026-07-17 ibm

IBM Path Traversal Langflow Oss

8.8

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable flow creation needs an authenticated low-priv user (PR:L), no interaction (UI:N); arbitrary file write enables code execution, so C/I/A all High.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 19:50 vuln.today

CVE Published

Jul 17, 2026 - 19:21 cve.org

HIGH 8.8

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename="../../../target/path" ), enabling arbitrary file write operations with attacker-controlled content to any path accessible by the Langflow process.

AnalysisAI

Arbitrary file write in IBM Langflow OSS 1.0.0 through 1.10.0 lets an authenticated user create a malicious flow that points to an attacker-controlled URL returning a crafted Content-Disposition header, causing the Langflow process to write attacker-supplied content to any filesystem path it can access. Because writes can land on startup scripts, keys, or configuration files, this path-traversal (CWE-22) flaw is a realistic route to full server compromise. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate to Langflow (low-priv user)

Delivery

Create flow pointing to attacker-controlled URL

Exploit

Server returns crafted Content-Disposition filename with traversal

Execution

Langflow writes payload to arbitrary path

Persist

Overwrite startup/cron/config file

Impact

Execute code as Langflow process

Access

Authenticate to Langflow (low-priv user)

Delivery

Create flow pointing to attacker-controlled URL

Exploit

Server returns crafted Content-Disposition filename with traversal

Execution

Langflow writes payload to arbitrary path

Persist

Overwrite startup/cron/config file

Impact

Execute code as Langflow process

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated Langflow account with the ability to create or edit flows (CVSS PR:L confirms authentication is needed). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (8.8, High) indicates a network-reachable, low-complexity attack needing only low privileges and no user interaction, with high impact to confidentiality, integrity and availability - consistent with an authenticated user who can create flows escalating to arbitrary file write and likely code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker with a low-privileged Langflow account builds a flow whose component fetches a URL on a server they control; that server responds with a Content-Disposition header like filename="../../../../etc/cron.d/evil" and a malicious payload as the body. Langflow saves the body to that traversed path, letting the attacker overwrite a cron job, startup script, or config file and pivot to code execution as the Langflow process. …
Remediation	Patch available per vendor advisory - upgrade to the fixed IBM Langflow OSS release identified in the IBM Security Bulletin at https://www.ibm.com/support/pages/node/7278931 (consult that advisory for the exact patched version, which is not enumerated in the input data). … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: inventory all deployments of Langflow 1.0.0-1.10.0, verify vendor-patch availability, and identify patching windows aligned with operational schedules. …

Threat intelligence, references, and detailed analysis are available after sign-in.