CVE-2026-55447

An attacker can control files passed to the RAG (Retrieval-Augmented Generation) mechanism and thereby induce components based on the BaseFileComponent class to read arbitrary files on the server by providing its absolute path. All components inheriting from BaseFileComponent are vulnerable, including: Docling (DoclingInlineComponent, DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). The mechanism does not properly validate the specified path, which corresponds to CWE-61 (path traversal) and CWE-200 (information disclosure).

An attacker can gain unauthorized access to arbitrary files on the server, including configuration files, keys, credentials, or other sensitive resources, which may lead to full system compromise or disclosure of confidential data.

Langflow should be updated to version 1.9.2 or newer, in which the vulnerability has been fixed. Details are available in the producer's references: https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75

Langflow in versions preceding 1.9.2; all instances using components based on BaseFileComponent are vulnerable (Docling, Read File, NVIDIA Retriever Extraction, Video File, Unstructured API).