IBM Langflow OSS versions 1.0.0 through 1.10.0 allow an authenticated attacker to create a malicious flow that points to an external URL serving a specially crafted Content-Disposition header. The header can contain a filename of the form "../../../target/path", enabling the Langflow process to write arbitrary content to any path that the process can access. This flaw is a classic path traversal (CWE-22) and permits arbitrary file write, allowing an attacker to inject configuration or executable files and potentially execute code or modify system state.

IBM Langflow OSS is affected by this vulnerability. All releases from version 1.0.0 up to and including 1.10.0 are impacted, as indicated by the associated CPE identifiers.

The CVSS score of 8.8 categorizes the issue as high severity, and the EPSS score of less than 1% indicates a low probability of exploitation at the current time. The vulnerability is not listed in the CISA KEV catalog. However, because it requires authenticated access, any compromised or privileged user can exploit the flaw to write files to arbitrary locations. The likely attack vector is an attacker who gains legitimate API access to construct a malicious flow. If the written file is a critical system file or a script executed by the process, the attacker could achieve remote code execution or system compromise.