Langflow: Symlink extraction vulnerability in BaseFileComponent allows arbitrary file read and RCE

A vulnerability in BaseFileComponent._unpack_bundle allows symlink extraction from tar files, enabling arbitrary file read and potential RCE via JWT secret theft.

Any Langflow user using BaseFileComponent-based components (Docling, Docling Serve, Read File, NVIDIA Retriever Extraction, Video File, Unstructured API) to ingest user-controlled data.

Upgrade to Langflow 1.9.2 or later immediately.