{"data":{"id":"16bb700f-f80d-4201-806d-60091551f196","title":"CVE-2026-13444: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by…","summary":"CVE-2026-13444 affects IBM Langflow OSS versions 1.0.0 through 1.10.1. An attacker can create their own flow with matching Chroma persist_directory and collection_name values to read another user's private vector documents, receiving exact victim content in their workflow output without authorization. The attacker can also insert their own documents into the victim's shared collection namespace. NVD has not yet provided an assessment, and the record is classified under CWE-520.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13444","publishedAt":"2026-07-30T19:17:06.997Z","cveId":"CVE-2026-13444","cweIds":["CWE-520"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS access to other users' vector documents via Chroma","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0035,"epssCheckedAt":"2026-11-11T00:13:29.486Z","kevDateAdded":null,"advisoryAliases":["GHSA-vrqm-44rp-59j5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T12:11:05.317Z","patchAvailable":null,"disclosureDate":"2026-07-30T19:17:06.997Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}