CVE-2025-68478 Details
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.
A vulnerability in Langflow versions prior to 1.7.0 allows authenticated users to specify arbitrary file paths in the request body's 'fs_path' field. The server then serializes the Flow object into JSON and writes it to the specified path, creating or overwriting a file without any path validation or restrictions. This issue could lead to unauthorized modification of files, including configuration or log files, depending on the specified path and the application's file handling.
Users are advised to update Langflow to version 1.7.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Dec 19, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4 | CISA-ADP | ExploitVendor Advisory |
| https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4 | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-610 | Externally Controlled Reference to a Resource in Another Sphere | [email protected] |
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| langflow langflow | < 1.7.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 2, 2026 | Initial Analysis | [email protected] |
| Dec 19, 2025 | New CVE Received | [email protected] |
| Dec 19, 2025 | CVE Modified | CISA-ADP |