Path Traversal in Apple macOS
CVE-2026-8859
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HTTP response Content-Disposition headers are not sanitized before being joined to the temporary directory path. An attacker controlling an external HTTP server can supply crafted filename values containing path traversal sequences (e.g., ../), enabling arbitrary file writes to locations accessible by the Langflow process.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.006 (45.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 45th percentile — 45.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Apple macOS
- IBM Langflow Oss — versions 1.0.0
- Langflow
- Linux Kernel
- Microsoft Windows
Weakness classification (CWE)
References
- www.ibm.com/support/pages/node/7278924 (vendor-advisory, patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-8859?
- CVE-2026-8859 is a critical-severity vulnerability in Apple macOS, classified under Path Traversal. CVSS score: 9.9/10. Published 2026-07-17.
- How severe is CVE-2026-8859?
- Critical severity. CVSS v3 base score is 9.9 out of 10.