CVE-2026-13442
High · 7.1CVSS
7.1
EPSS
0.3%
Published
Jul 28, 2026
CISA due date
—
The record
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-13444 IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's… CWE-520
- CVE-2026-2450 .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper… CWE-520
- CVE-2019-25608 Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows… CWE-520