CVE-2026-55447

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.2

Description An issue exists in components based on BaseFileComponent, including Docling (DoclingInlineComponent), Docling Serve (DoclingRemoteComponent), Read File (FileComponent), NVIDIA Retriever Extraction (NvidiaIngestComponent), Video File (VideoFileComponent), and Unstructured API (UnstructuredComponent). The unpack bundle() function in langflow/src/lfx/src/lfx/base/data/base file.py fails to properly validate files during TAR extraction, allowing the processing of symlinks. An attacker can provide a crafted TAR file containing symlinks to absolute paths on the file-system, directing the node to read arbitrary files. This can lead to the exposure of sensitive information, such as the secret key used for JWT tokens, which could subsequently allow an attacker to bypass authentication and achieve remote code execution by creating a flow with a Python Interpreter node.

Recommendations Update to version 1.9.2 or later. As a temporary workaround, restrict the use of components based on BaseFileComponent when processing user-controlled data.