Skip to content

FileSystemBackend path traveseral on NextJS files #34961

@peterkarman1

Description

@peterkarman1

Checked other resources

  • This is a bug, not a usage question.
  • I added a clear and descriptive title that summarizes this issue.
  • I used the GitHub search to find a similar question and didn't find it.
  • I am sure that this is a bug in LangChain rather than my code.
  • The bug is not resolved by updating to the latest stable version of LangChain (or the specific integration package).
  • This is not related to the langchain-community package.
  • I posted a self-contained, minimal, reproducible example. A maintainer can copy it and run it AS IS.

Package (Required)

  • langchain
  • langchain-openai
  • langchain-anthropic
  • langchain-classic
  • langchain-core
  • langchain-model-profiles
  • langchain-tests
  • langchain-text-splitters
  • langchain-chroma
  • langchain-deepseek
  • langchain-exa
  • langchain-fireworks
  • langchain-groq
  • langchain-huggingface
  • langchain-mistralai
  • langchain-nomic
  • langchain-ollama
  • langchain-perplexity
  • langchain-prompty
  • langchain-qdrant
  • langchain-xai
  • Other / not sure / general

Related Issues / PRs

No response

Reproduction Steps / Example Code (Python)

Run any deepagent against a repository with files like `[...nextauth].ts`, see that pathtraversal is flagged

Error Message and Stack Trace (if applicable)

Description

The fileSystemMiddleware looking for path traversal flags files like [...nextauth].ts due to the .... Pattern should be updated to allow [...]

System Info

  • Python: 3.12.8
  • langchain_core: 1.2.7
  • langchain: 1.2.6
  • langchain_aws: 1.0.0
  • langgraph: 1.0.4
  • anthropic: 0.76.0
  • boto3: 1.40.45

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugRelated to a bug, vulnerability, unexpected error with an existing featureexternallangchain`langchain` package issues & PRs

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions