IBM Langflow OSS Remote Code Execution Vulnerability via Symbolic Link Misvalidation

A remote code execution vulnerability exists in IBM Langflow OSS versions 1.0.0 through 1.9.1. The issue arises from improper validation of symbolic links during the extraction of tar archives, allowing attackers to exploit symlinks to access arbitrary files on the file system. In scenarios where users can upload documents, a crafted tar file could be used to link to sensitive files, such as Langflow OSS' JWT secret key. Once these files are processed and stored in the vector database, the attacker could retrieve sensitive information through chatbot queries, potentially leading to authentication bypass and remote code execution via the Python Interpreter node.

Impact

Exploitation of this vulnerability could result in unauthorized access to the file system, allowing for the extraction of sensitive data. In certain scenarios, this could lead to authentication bypass and remote code execution.

Remediation

Users are advised to upgrade IBM Langflow OSS to version 1.9.2.