CVE-2025-68478: langflow-ai langflow External Control of File Name or Path

Vulnerability summary

CVE-2025-68478 is a high (CVSS 7.1) External Control of File Name or Path vulnerability in langflow-ai langflow. EPSS estimates a 5.79% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 19-12-2025
   PublishedVulnerability first disclosed.
2. 19-12-2025
   Last modifiedVulnerability information updated.

Description

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.

• CWE-73External Control of File Name or PathThe product allows user input to control or influence paths or file names that are used in filesystem operations.
• CWE-610Externally Controlled Reference to a Resource in Another SphereThe product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.