Skip to content
OpenAdvisories
High · 7.1 CVE-2026-13442 EUVD-2026-50066GHSA-668j-2f6w-gqwr

Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints

Published Jul 28, 2026 · Updated Jul 29, 2026 · Assigned by ibm

Description

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.

Affected products

VendorProductAffectedFixed
IBM Langflow OSS 1.0.0 – ≤ 1.10.1 —

Advisories 1

References