CVE-2026-13442 — Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently…

CVE-2026-13442

Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.1

CWE

CWE-520

References

https://www.ibm.com/support/pages/node/7279988

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.