CVE-2026-55447

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

State: Published
Severity: 9.6 Critical
Published: Jun 23, 2026
Updated: Jun 24, 2026
Reserved: Jun 16, 2026

Description

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). This vulnerability is fixed in 1.9.2.

Scores

CVSS	Score	Vector	Source
3.1	9.6 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-61 UNIX Symbolic Link (Symlink) Following
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
langflowlangflow-ai	< 1.9.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.