What is the CVSS score of CVE-2026-13442?

CVE-2026-13442 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

How to fix or mitigate CVE-2026-13442?

Within 24 hours, identify all systems running IBM Langflow OSS versions 1.0.0 through 1.10.1 and apply the vendor-released patch or upgrade to a fixed version after testing. Within 7 days, verify all instances are patched and monitor logs for signs of unauthorized access or data manipulation. Within 30 days, review access controls and consider additional monitoring for FAISS namespaces to prevent future cross-user data leakage.

IBM Langflow OSS CVE-2026-13442

Q: Which versions of IBM Langflow OSS are affected by CVE-2026-13442?

IBM Langflow OSS versions 1.0.0 through 1.10.1 contain a vulnerability that allows authenticated attackers to access private vector data and manipulate query results across users.. A patch is available.

EUVD-2026-50066 HIGH

.NET Misconfiguration: Use of Impersonation (CWE-520)

2026-07-28 ibm

GHSA-668j-2f6w-gqwr

IBM Information Disclosure Langflow Oss

7.1

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

vuln.today AI

7.1 HIGH

Requires low-privilege authentication and no user interaction; no scope change; high confidentiality, low integrity, no availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 21:23 vuln.today

CVE Published

Jul 28, 2026 - 20:55 nvd

HIGH 7.1

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.

AnalysisAI

Cross-user information disclosure in IBM Langflow OSS 1.0.0-1.10.1 allows authenticated attackers to access private vector content and poison query results by reusing another user's FAISS namespace. This leads to high confidentiality impact and low integrity impact; the vulnerability has a CVSS 3.1 score of 7.1, and a vendor patch is available.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate to Langflow instance with low privileges

Exploit

Craft a request to register an existing user's FAISS namespace

Execution

Access private vector data and/or inject malicious vectors

Impact

Victim user performs queries that return poisoned or exposed results.

Access

Authenticate to Langflow instance with low privileges

Exploit

Craft a request to register an existing user's FAISS namespace

Execution

Access private vector data and/or inject malicious vectors

Impact

Victim user performs queries that return poisoned or exposed results.

Vulnerability AssessmentAI

Exploitation	The attacker must possess low-level authentication credentials to the Langflow instance (PR:L) and be able to specify a FAISS namespace that matches an existing one owned by another user. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) indicates a network-accessible attack with low complexity, low privileges required, and no user interaction, resulting in high confidentiality impact and low integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An authenticated attacker with low privileges registers a FAISS namespace that collides with a victim's existing namespace (e.g., by guessing or enumerating it). Upon successful reuse, the attacker retrieves the victim's private vectors and may inject poisoned vectors, causing subsequent queries by the victim to return manipulated or leaked data.
Remediation	Upgrade to IBM Langflow OSS version 1.10.2 or later, as indicated in the vendor advisory at https://www.ibm.com/support/pages/node/7279988. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all systems running IBM Langflow OSS versions 1.0.0 through 1.10.1 and apply the vendor-released patch or upgrade to a fixed version after testing. …

Threat intelligence, references, and detailed analysis are available after sign-in.