CVE-2026-51888

Summary

The langflow AI application has a directory traversal vulnerability in its knowledge base creation endpoint that allows attackers to write files outside the intended workspace, potentially leading to arbitrary file overwrites or writes.

Exploitability

Exploitation is straightforward requiring only a single HTTP POST request to the vulnerable endpoint with an absolute path in the filename parameter, with no authentication required.

Blast radius

If exploited, this vulnerability could allow attackers to overwrite critical application files, configuration files, or even inject malicious code into the system, potentially leading to full system compromise.

Detection

Monitor for HTTP POST requests to /api/v1/knowledge_bases with absolute paths in filename parameters, particularly those containing path traversal sequences like '../' or '/etc/', and check for file system write operations outside the intended workspace directory.

Prioritized remediation

Upgrade to langflow version 1.8.5 or later to address the directory traversal vulnerability in the knowledge base creation endpoint.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.