What is the CVSS score of EUVD-2026-45331?

EUVD-2026-45331 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.2%.

Which versions of IBM Langflow are affected by EUVD-2026-45331?

IBM Langflow OSS versions 1.0.0 through 1.10.1 contain a cross-user file access vulnerability allowing authenticated users to read and modify files belonging to other users in shared deployments.. A patch is available.

How to fix or mitigate EUVD-2026-45331?

Within 24 hours, identify all IBM Langflow OSS deployments and inventory current versions in use. Within 7 days, apply the vendor-released patch to upgrade all instances from affected versions 1.0.0-1.10.1 to the patched release, prioritizing production and shared environments. Within 30 days, audit file access logs to identify unauthorized cross-user file operations during the vulnerable period and implement access controls on file operations within Langflow.

IBM Langflow EUVD-2026-45331

| CVE-2026-13445 HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-07-17 ibm

GHSA-8f66-77fw-hmvj

Authentication Bypass IBM Langflow Oss

8.1

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

vuln.today AI

8.1 HIGH

Network-reachable component abusable by any authenticated low-privilege user (PR:L) with no interaction; high confidentiality and integrity from cross-user read/overwrite, no availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 21:16 vuln.today

CVE Published

Jul 17, 2026 - 20:44 cve.org

HIGH 8.1

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. In append mode, the attacker's workflow reads victim file contents, appends attacker-controlled data, and uploads a copy containing victim data to the attacker's namespace (confidentiality breach). In overwrite mode, the attacker can replace victim file contents with arbitrary data (integrity breach). This breaks the storage ownership boundary between users.

AnalysisAI

Cross-user file access in IBM Langflow OSS (1.0.0 through 1.10.1) lets an authenticated user abuse the SaveToFile component to read and modify files uploaded by other users by supplying absolute paths that point into victim storage locations. Append mode enables exfiltration of victim data into the attacker's namespace (confidentiality), while overwrite mode allows replacing victim content with arbitrary data (integrity), collapsing the per-user storage ownership boundary. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; a vendor patch is available.

Technical ContextAI

Langflow is an open-source visual framework for building LLM-driven agents and workflows, where users compose components on a canvas and persist artifacts to per-user storage. The affected element is the SaveToFile component, which accepts a file path argument used for writing (and, in append mode, first reading) files. The root cause is CWE-639 (Authorization Bypass Through User-Controlled Key): the component trusts the user-supplied absolute path as the storage key without validating that the path resolves inside the requesting user's own namespace, so a caller can reference another tenant's files. This is an IDOR-class flaw rather than classic path traversal - the key identifying the target object is fully attacker-controlled and no ownership check is enforced before the read/append/overwrite operation.

RemediationAI

Patch available per vendor advisory - upgrade to the fixed release identified in IBM's advisory at https://www.ibm.com/support/pages/node/7279990 (the input does not include an exact fixed version string, so confirm the target version directly from that advisory before deploying). Until patched, restrict the SaveToFile component and any workflow file paths to a per-user directory and reject absolute paths or paths that resolve outside the calling user's storage root; where feasible, disable or gate the SaveToFile component for untrusted users, noting this breaks legitimate file-saving workflows. Additionally, limit account provisioning on shared instances and monitor storage for cross-user writes/appends, accepting the operational overhead of tighter access review as the trade-off for closing the tenant boundary until the upgrade is applied.