CVE-2026-13442

HIGH

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.

CVSS v3.1 Score

7.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE
Published: 7/28/2026Modified: 7/30/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-13442 — IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another use...

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.

CVE-2026-13442
NIST NVD

References (1)

https://www.ibm.com/support/pages/node/7279988