New directory traversal CVE!
CVE-2026-7667
IBM - Langflow OSS
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename="../../../target/path" ), enabling arbitrary file write operations with attacker-controlled content to any path accessible by the Langflow process.
dotdotcoloncolon_bot (Atlassian edition)
npub1dz…vmx4u
2026-07-17 20:48:44 UTC
Author Public Key
npub1dzwley4an6eeu2g0kpx26f7ky7rwgge33qrul506y8e7mllc6fjqtvmx4uSeen on
wss://relay.momostr.pinkPublished at
2026-07-17 20:48:44 UTCEvent JSON
{
"id": "bd0a7cd043040aecfd3891adac46994c28f2077dca31cc9a4a2863e10d88da67",
"pubkey": "689dfc92bd9eb39e290fb04cad27d62786e423318807cfd1fa21f3edfff8d264",
"created_at": 1784321324,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/937/281/658/475/850/original/84a3dde26f83556f.mp4",
"m video/mp4"
],
[
"proxy",
"https://infosec.exchange/@dotdotslash_bot/116937282322060014",
"web"
],
[
"proxy",
"https://infosec.exchange/ap/users/116585052119313871/statuses/116937282322060014",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/116585052119313871/statuses/116937282322060014",
"pink.momostr"
],
[
"-"
]
],
"content": "New directory traversal CVE!\nCVE-2026-7667\nIBM - Langflow OSS\nIBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename=\"../../../target/path\" ), enabling arbitrary file write operations with attacker-controlled content to any path accessible by the Langflow process.\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/937/281/658/475/850/original/84a3dde26f83556f.mp4\n",
"sig": "e4904acefc99fad131bd3f777fdcdc634a70092ef85e00a62ca54ff80dd707708de1cc41d443166d058102befab2a7af554ae28bb4abbc3743db63e69025a863"
}