CVE-2026-13448: Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/buildpublictmp/{flowid}/flow ). The vulnerability stems from an incomplete denylist in the validatepublicflownocodeexecution() function that fails to block several code-execution agent components including OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.10.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13448?
CVE-2026-13448 has a critical severity score of 9.8.
How does CVE-2026-13448 affect IBM Langflow OSS?
CVE-2026-13448 allows for remote code execution, denial of service, path traversal, and exposure of credentials through insufficiently authorized API endpoints.
How can I fix CVE-2026-13448?
To fix CVE-2026-13448, update IBM Langflow OSS to the latest version beyond 1.10.1, which addresses this vulnerability.
Is authentication required to exploit CVE-2026-13448?
No, CVE-2026-13448 can be exploited without authentication, making it particularly severe.
What types of attacks can be executed through CVE-2026-13448?
CVE-2026-13448 can lead to remote code execution, denial of service, and unauthorized data exposure.