{
 "id": "AIR-2026-1194",
 "slug": "cve-2026-13445-ibm-langflow-oss-storage-boundary-violation-i",
 "title": "CVE-2026-13445: IBM Langflow OSS storage boundary violation in SaveToFile component",
 "summary": "IBM Langflow OSS versions 1.0.0 through 1.10.1 permit authenticated attackers to read and modify other users' uploaded files by using absolute paths in the SaveToFile component. This breaks user storage isolation and causes confidentiality and integrity breaches.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow"
 ],
 "incident_date": "2026-07-17",
 "incident_date_precision": "day",
 "first_reported": "2026-07-17",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13445",
   "publisher": "NVD",
   "title": "CVE-2026-13445: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify…",
   "published_at": "2026-07-17"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-13445",
  "langflow",
  "path-traversal"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}