Vulnerability Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). This vulnerability is fixed in 1.9.2.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Langflow | Langflow | < 1.9.2 |
Related Weaknesses (CWE)
References
- https://github.com/langflow-ai/langflow/pull/12945Issue TrackingPatch
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75ExploitPatchVendor Advisory
FAQ
What is CVE-2026-55447?
CVE-2026-55447 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file o...
How severe is CVE-2026-55447?
CVE-2026-55447 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-55447?
Check the references section above for vendor advisories and patch information. Affected products include: Langflow Langflow.