CVE-2026-33309

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File Name), leading to the root architectural issue within `LocalStorageService` remaining unresolved. Because the underlying storage layer lacks boundary containment checks, the system relies entirely on the HTTP-layer `ValidatedFileName` dependency. This defense-in-depth failure leaves the `POST /api/v2/files/` endpoint vulnerable to Arbitrary File Write. The multipart upload filename bypasses the path-parameter guard, allowing authenticated attackers to write files anywhere on the host system, leading to Remote Code Execution (RCE). Version 1.9.0 contains an updated fix.

• CWE-22
• CWE-73
• CWE-94
• CWE-284

• https://github.com/langflow-ai/langflow/security/advisories/GHSA-g2j9-7rj2-gm6cExploit, Mitigation, Vendor Advisory

Published

Mar 24, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33303OpenEMR is a free and open source electronic health records …5.4
• CVE-2026-33304OpenEMR is a free and open source electronic health records …6.5
• CVE-2026-33305OpenEMR is a free and open source electronic health records …5.4
• CVE-2026-33306bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() passw…7.5
• CVE-2026-33307Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.…7.5
• CVE-2026-33308Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.…5.9
• CVE-2026-3331The Lobot Slider Administrator plugin for WordPress is vulne…4.3
• CVE-2026-33310Intake is a package for finding, investigating, loading and …8.8
• CVE-2026-33311DiceBear is an avatar library for designers and developers. …4.7
• CVE-2026-33312Vikunja is an open-source self-hosted task management platfo…5.4
• CVE-2026-33313Vikunja is an open-source self-hosted task management platfo…4.3
• CVE-2026-33314pyLoad is a free and open-source download manager written in…6.5