CVE-2026-55447

CRITICAL 9.6

Published 2026-06-23 · Last modified 2026-06-24

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to the vulnerability. This includes Docling (DoclingInlineComponent), Docling Serve, DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). This vulnerability is fixed in 1.9.2.

ELEVATED IMPACT

Severe if exploited (CVSS 9.6), but no known exploitation and low modeled probability. Patch on a normal cadence.

Exploitation likelihood

0.4%chance of exploitation in 30 days · 33rd percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

9.6CVSS 3.1 · CRITICAL

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
⚠User interaction: A user must take an action (click / open a file)
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

reference https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75
github-search Search GitHub for public PoC repos

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2026-55447/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-55447/poc.json

Affected

Vendors Langflow Ai Langflow

Products Langflow

Weakness (CWE)

CWE-61: : UNIX Symbolic Link (Symlink) Following
CWE-200: : Exposure of Sensitive Information to an Unauthorized Actor

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Known Affected Software Configurations

Vendor	Product	Version range
Langflow	Langflow	< 1.9.2

All CVSS metrics

CRITICAL 9.6 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CRITICAL 9.6 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

Exploits & PoC

https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75 x_refsource_CONFIRMExploitPatchVendor Advisory

Patches & mitigations

https://github.com/langflow-ai/langflow/pull/12945 x_refsource_MISCIssue TrackingPatch

Sources: NVD · CVE.org · EPSS