This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Suriq - Always on Watch
suriq.io
did:plc:6vjp7fbgz5ductueireifliv
A single poisoned document dropped into a Langflow RAG pipeline reads any file on the box, forges a login token, then runs code. CVE-2026-55447, CVSS 9.6. Patched in 1.9.2.
#CVE #infosec #cybersecurity
https://suriq.io/blog/langflow-rag-file-read-rce
2026-06-20T01:38:02.761Z