CVE-2026-55447 is a symbolic link following vulnerability (CWE-61) in langflow, a tool for building and deploying AI-powered agents and workflows. Versions before 1.9.2 allow an attacker who controls files digested into the RAG to direct the system to read any file on the filesystem via absolute path traversal. The affected components include DoclingInlineComponent, DoclingServe, DoclingRemoteComponent, FileComponent, NvidiaIngestComponent, VideoFileComponent, and UnstructuredComponent, all based on BaseFileComponent. This can lead to unauthorized disclosure of sensitive information. The vulnerability is resolved in langflow version 1.9.2.

Successful exploitation allows an unauthenticated attacker to read arbitrary files on the host filesystem, potentially exposing sensitive data and compromising confidentiality, integrity, and availability of the system. The CVSS 3.1 score is 9.6 (critical), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability.

Upgrade langflow to version 1.9.2 or later, where this vulnerability is fixed. No other mitigation or temporary workaround is indicated. Patch status is confirmed by the vendor advisory stating the fix in 1.9.2.