CVE-2025-68478 Langflow Vulnerable to External Control of File Name or Path
Attackers can write arbitrary files to the server by manipulating the fs_path parameter, potentially overwriting critical system files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68478?
CVE-2025-68478 is a high-severity path traversal vulnerability in Langflow Langflow, published on 19 Dec 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.
Which versions are affected by CVE-2025-68478?
3 open source packages ship an affected version, including langflow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
langflow PyPI | All versions | 1.7.0 |
langflow PyPI | All versions | 1.7.1 |
langflow PyPI | All versions | 1.7.1 |
Products include Langflow Langflow.
How do I fix CVE-2025-68478?
Upgrade langflow to a fixed version for your release line: 1.7.0 or 1.7.1.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-68478 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-68478 exists.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-f43r-cc68-gpx4, PYSEC-2025-125.