Low severity3.5NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026
CVE-2026-104312
CVE-2026-104312
Description
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file write on the victim's host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0.0 - 1.12.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.