CVE-2025-68478: Langflow Arbitrary File Write Vulnerability
Summary
CVE-2025-68478: External Control of File Name or Path in Langflow. Affects langflow versions < 1.7.1. Fixed in 1.7.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework designed for building and managing workflows in AI applications. It allows users to create, modify, and store flow configurations that dictate how data is processed and managed. However, a significant vulnerability exists within its file handling mechanism, which can lead to unauthorized file writes on the server.
Vulnerability Detail
The vulnerability arises from the lack of proper validation and restrictions on file paths specified by users in the request body. Specifically, the 'fs_path' parameter can be manipulated to point to arbitrary file locations on the server. This can lead to overwriting critical files, potentially corrupting application configurations or logs. The vulnerability is exacerbated by the fact that both absolute and relative paths are accepted, allowing for directory traversal attacks. The root cause is found in the code that serializes Flow objects and writes them to the specified paths without adequate checks.
How To Fix
Latest published version: 1.14.0.dev2 as of 22 Oct 2026
pip install --upgrade "langflow==1.14.0.dev2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.7.1
This is the first release that contains the fix.
pip install --upgrade "langflow==1.7.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict user input for the 'fs_path' parameter to a predefined set of safe paths. This can be done by implementing a whitelist of acceptable paths in your application code.
Conclusion
CVE-2025-68478 represents a serious security risk for applications using Langflow, allowing for arbitrary file writes due to insufficient path validation. It is crucial for users to update to the patched version and implement additional security measures to mitigate this risk.
See every vulnerability recorded for langflow →
FAQ
CVE-2025-68478 is a vulnerability in Langflow that allows authenticated users to write files to arbitrary locations on the server.
Exploitation of this vulnerability can lead to unauthorized file writes, potentially corrupting important application files and disrupting functionality.
Versions prior to 1.7.1 of Langflow are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Check your application against CVE-2025-68478 using the Vulert playground.
The CVSS score for this vulnerability is 7.1, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
