CVE-2026-13446 — Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to mult…

CVE-2026-13446

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.1

CWE

CWE-798

References

https://www.ibm.com/support/pages/node/7279991

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.