CVE-2026-55447CWE-200CWE-61

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Critical · published June 23, 2026

CVSS v3.1
9.6
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). This vulnerability is fixed in 1.9.2.

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.1th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2026-06-23T16:21Z
EPSS history
Timeline
  • 23 JUN 16:21Z
    Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
    cvelistv5