What is the CVSS score of CVE-2026-13442?

CVE-2026-13442 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

How to fix or mitigate CVE-2026-13442?

Within 24 hours, identify all systems running IBM Langflow OSS versions 1.0.0 through 1.10.1 and apply the vendor-released patch or upgrade to a fixed version after testing. Within 7 days, verify all instances are patched and monitor logs for signs of unauthorized access or data manipulation. Within 30 days, review access controls and consider additional monitoring for FAISS namespaces to prevent future cross-user data leakage.

IBM Langflow OSS CVE-2026-13442

Q: Which versions of IBM Langflow OSS are affected by CVE-2026-13442?

IBM Langflow OSS versions 1.0.0 through 1.10.1 contain a vulnerability that allows authenticated attackers to access private vector data and manipulate query results across users.. A patch is available.

EUVD-2026-50066 HIGH

.NET Misconfiguration: Use of Impersonation (CWE-520)

2026-07-28 ibm

GHSA-668j-2f6w-gqwr

Information Disclosure IBM Langflow Oss

7.1

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

vuln.today AI

7.1 HIGH

Requires low-privilege authentication and no user interaction; no scope change; high confidentiality, low integrity, no availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 21:23 vuln.today

CVE Published

Jul 28, 2026 - 20:55 nvd

HIGH 7.1

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.

AnalysisAI

Cross-user information disclosure in IBM Langflow OSS 1.0.0-1.10.1 allows authenticated attackers to access private vector content and poison query results by reusing another user's FAISS namespace. This leads to high confidentiality impact and low integrity impact; the vulnerability has a CVSS 3.1 score of 7.1, and a vendor patch is available.

Technical ContextAI

Langflow OSS is a visual framework for building RAG and multi-agent AI applications, using FAISS (Facebook AI Similarity Search) as a vector store to index and query embeddings. The flaw, classified under CWE-520 (Missing Protection Mechanism for Shared Resource), arises because namespace-based isolation in FAISS does not prevent a low-privileged user from reusing an existing namespace created by another user, thereby gaining unauthorized access to owner-only vectors. According to CPE cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:*, all versions from 1.0.0 through 1.10.1 are affected.

RemediationAI

Upgrade to IBM Langflow OSS version 1.10.2 or later, as indicated in the vendor advisory at https://www.ibm.com/support/pages/node/7279988. If immediate patching is not possible, restrict access to the Langflow instance to trusted users only and monitor for anomalous namespace registration patterns that mimic existing user namespaces, though this is a temporary and imperfect control.