Paper/Archive/CVE-2026-55447

CVE-2026-55447

langflow-ai langflow — Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 51.7.517 × 2010.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). This vulnerability is fixed in 1.9.2.

Affected

ProductAffectedFixed inSource

langflow< 1.9.2–CNA

Scores by source

GitHub_M (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75 refgithub.com/langflow-ai/langflow/pull/12945