{"id":"CVE-2025-68478","published":"2025-12-19T17:10:14Z","modified":"2025-12-19T17:59:42Z","title":"Langflow Vulnerable to External Control of File Name or Path","vendor":"langflow-ai","product":"langflow","tier":"tail","description":{"text":"Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.05787,"percentile":0.93076,"provenance":"source"},"cwes":[{"id":"CWE-73","name":"External Control of File Name or Path"}],"references":[{"url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4","tags":["x_refsource_CONFIRM"]}],"priority":{"score":23.6,"factors":[{"name":"EPSS percentile","points":18.62},{"name":"CVSS severity","points":4.97}]},"vendorSlug":"langflow-ai","affectedVersions":[{"vendor":"langflow-ai","product":"langflow","versions":["< 1.7.0"]}],"affected":[{"ecosystem":"PyPI","package":"langflow","vulnerableRanges":["<1.7.1","<1.7.0"],"patched":["1.7.1","1.7.0"],"from":["GHSA-f43r-cc68-gpx4","PYSEC-2025-125"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-204581","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-langflow-ai-langflow-cve-2025-68478","children":[{"from":"CVE-2025-68478","to":"CVE-2026-33309","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File Name), leading to the root architectural issue within `LocalStorageService` remaining unresolved.","from":"CVE.org","in":"CVE-2026-33309"}]}],"packageHistory":[{"cve":"CVE-2025-57760","published":"2025-08-25","fixed":"1.5.1","kev":false,"link":{"from":"CVE-2025-57760","to":"CVE-2025-68478","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langflow","fromFixed":"1.5.1","toFixed":"1.7.0","daysApart":116}]}},{"cve":"CVE-2025-34291","published":"2025-12-05","fixed":"1.7.0","kev":true},{"cve":"CVE-2026-55423","published":"2026-06-23","fixed":"1.7.0","kev":false},{"cve":"CVE-2025-68477","published":"2025-12-19","fixed":"1.7.1","kev":false},{"cve":"CVE-2025-68478","published":"2025-12-19","fixed":"1.7.1","kev":false},{"cve":"CVE-2026-21445","published":"2026-01-02","fixed":"1.7.1","kev":false},{"cve":"CVE-2026-33497","published":"2026-03-24","fixed":"1.7.1","kev":false},{"cve":"CVE-2026-33017","published":"2026-03-20","fixed":"1.9.0","kev":true}],"package":"PyPI:langflow"}}