A vulnerability was discovered in IBM Langflow OSS versions 1.0.0 to 1.12.2, allowing an authenticated flow author to write arbitrary files to any directory writable by the service account. This bypasses the platform's local file access isolation safeguard. Additionally, an attacker can read the contents of arbitrary files accessible to the service process through a crafted on-disk index, potentially exposing sensitive data such as configuration files, secrets, or database files stored under the application's data directory. This vulnerability matters to people building and operating AI agents as it allows an attacker to potentially access sensitive data, compromising system integrity and security.