CVE-2026-33497: langflow Directory Traversal Vulnerability in Profile Picture Endpoint

Background

Langflow is an open-source framework designed for building and managing workflows in Python applications. It provides various functionalities, including user profile management, which allows users to upload and download profile pictures. However, a critical vulnerability has been identified in the endpoint responsible for handling profile picture downloads, specifically in the way it processes user input.

Vulnerability Detail

The vulnerability arises from the insufficient validation of the 'folder_name' and 'file_name' parameters in the download_profile_picture function of the /profile_pictures/{folder_name}/{file_name} endpoint. This lack of strict filtering allows attackers to exploit directory traversal techniques to access sensitive files outside the intended directory. For instance, an attacker could potentially read the 'secret_key' file, which is crucial for JWT authentication, enabling them to forge authentication tokens and gain unauthorized access to the system. The technical details indicate that the vulnerability is rooted in the concatenation of flow_id and file_name without proper sanitization, making it susceptible to path traversal attacks.

pip install --upgrade "langflow==1.14.0.dev2"

pip install --upgrade "langflow==1.7.1"

Workaround

As a temporary workaround, you can implement input validation to sanitize the 'folder_name' and 'file_name' parameters before processing them. For example, you can restrict the input to a predefined set of allowed values or use a library to safely handle file paths. Here is a basic example of input validation in Python:

import os

allowed_folders = ['user_uploads', 'default_pictures']

def safe_download_profile_picture(folder_name, file_name):
    if folder_name not in allowed_folders:
        raise ValueError('Invalid folder name')
    safe_path = os.path.join('profile_pictures', folder_name, file_name)
    # Proceed with file retrieval using safe_path

Conclusion

In summary, CVE-2026-33497 is a critical vulnerability in the langflow package that allows directory traversal, potentially exposing sensitive files. It is essential to update to the patched version and implement proper input validation to safeguard your application.

See every vulnerability recorded for langflow →

FAQ