Security Bulletin: Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution

Summary A path traversal vulnerability exists in multiple Langflow OSS file processing components Docling, Docling Serve, Read File, NVIDIA Retriever Extraction, Video File, and Unstructured API that are based on BaseFileComponent. The vulnerability in the unpackbundle function allows attackers t...

CVE-2026-7524

creationtimestamp| type| source ---|---|--- 2026-05-27 15:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrltwuxw2g 2026-05-27 16:14:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtvosxdoy2i 2026-06-22 06:01:35+00:00| seen|...

CVE-2026-7524

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction...