AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-13435

IBM Langflow OSS: improper input validation

IBM

CVE-2026-13435 · Published Jul 30, 2026 · updated Aug 4, 2026

Critical9.9
No fix yet
IBM advisory

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.

Affected versions

PackageAffectedFixed in
Langflow OSS
Product
>= 1.0.0, <= 1.10.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-94

More IBM advisories

All IBM
High 8.5Jul 30IBM WebSphere Application Server: remote code executionCVE-2026-11536no fix yetCritical 9.9Jul 30IBM Langflow OSS: code injectionCVE-2026-12946no fix yetMedium 4.3Jul 30UCD - IBM: information disclosureCVE-2026-10569no fix yetHigh 8.1Jul 30IBM Langflow OSS: attacker could access another user's private vectorCVE-2026-13444no fix yetHigh 7.5Jul 30IBM Langflow OSS: path traversalCVE-2026-12942no fix yetCritical 9.8Jul 30IBM HMC: remote code executionCVE-2026-12943no fix yet