Vulnerabilities CVE-2026-13446

CVE-2026-13446

Critical

Open

TLP:CLEAR

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

NVD CVE.org

DDoS

AI Analysis

No AI analysis yet.

Description

IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Details

CVSS Score: 9.8
EPSS Score ⓘ: 0.23%

13.4th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jul 17, 2026
Last Modified: Jul 23, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.