Langflow versions prior to 1.7.0 are susceptible to an arbitrary file write vulnerability that allows authenticated attackers to overwrite critical system files.

This vulnerability is a path traversal and arbitrary file write flaw (CWE-73) where the application fails to normalize or restrict the fs_path parameter in the request body. An authenticated attacker can supply an absolute path to overwrite or create files on the underlying filesystem with the privileges of the Langflow service.

The ability to write or overwrite arbitrary files on the host system presents a severe risk of system compromise. An attacker could potentially overwrite configuration files, inject malicious scripts, or modify system binaries to achieve remote code execution, leading to full server takeover and data integrity loss. Given the CVSS score of 7.1, this vulnerability is classified as High severity and requires immediate remediation to prevent unauthorized system manipulation.

Immediate Action: Update the Langflow installation to version 1.7.1 or later immediately to incorporate the required path normalization and security controls.

Proactive Monitoring: Review application access logs for unusual requests containing absolute file paths in the fs_path parameter. Monitor the filesystem for unauthorized file modifications or the creation of unexpected files in sensitive directories.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect and block incoming requests containing path traversal sequences or absolute path references in request bodies. Ensure the Langflow service runs with the least privilege necessary to minimize the impact of a successful file write.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk to the integrity of the host server due to the potential for arbitrary file overwriting. Security teams must prioritize upgrading to version 1.7.1 as soon as possible. In environments where immediate patching is not feasible, ensure that the application is isolated and that strictly defined file permissions are enforced to limit the potential damage of a successful exploit.