Langflow Vulnerability Allows File Manipulation

CERT-Bund has released a security advisory (WID-SEC-2026-0868) concerning a critical vulnerability in Langflow and Langflow Base. The vulnerability, rated with a CVSS base score of 8.8, allows authenticated remote attackers to manipulate files on affected systems, which include Linux, UNIX, and Windows operating systems.

Organizations utilizing affected versions of Langflow (<1.5.1) or Langflow Base (<0.5.1) should immediately apply available mitigations or update to a patched version. Failure to address this vulnerability could lead to unauthorized data modification or system compromise. The advisory indicates that mitigations are available, and users are strongly encouraged to implement them promptly.