IBM Langflow Desktop versions 1.2.0 through 1.8.4 contain a directory traversal vulnerability. An authenticated attacker can exploit this flaw by sending a specially crafted URL with "dot dot" sequences (/../) to write arbitrary files on the system. This vulnerability could lead to unauthorized file modification but does not impact confidentiality or availability.