AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-13448

IBM Langflow OSS: remote code execution

IBM

CVE-2026-13448 · Published Jul 17, 2026 · updated Jul 23, 2026

High8.1
No fix yet
IBM advisory

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). The vulnerability stems from an incomplete denylist in the validate_public_flow_no_code_execution() function that fails to block several code-execution agent components including OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent.

Affected versions

PackageAffectedFixed in
Langflow OSS
Product
>= 1.0.0, <= 1.10.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-184

More IBM advisories

All IBM
High 8.1Jul 17IBM Langflow OSS: insecure direct object referenceCVE-2026-13445no fix yetCritical 9.8Jul 17IBM Langflow OSS: hard-coded credentialsCVE-2026-13446no fix yetCritical 9.8Jul 17IBM Langflow OSS: remote code executionCVE-2026-8505no fix yetCritical 9.9Jul 17IBM Langflow OSS: privilege escalationCVE-2026-8635no fix yetCritical 9.9Jul 17IBM Langflow OSS: improper input validationCVE-2026-8859no fix yetMedium 5.3Jul 17IBM Security Verify Access: information disclosureCVE-2026-8861no fix yet