{"data":{"id":"e4dc2f0f-dc30-4ad4-aa46-67654f9d1ef9","title":"CVE-2026-13448: IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the","summary":"IBM Langflow OSS (an open-source tool for building AI workflows) versions 1.0.0 through 1.10.1 have an unauthenticated remote code execution vulnerability (RCE, where attackers can run commands on the system without logging in) in a public endpoint. The vulnerability exists because the validate_public_flow_no_code_execution() function (a safety check) has an incomplete denylist (a list of things to block) that fails to block certain agent components like OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent from executing code.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13448","publishedAt":"2026-07-17T20:17:14.713Z","cveId":"CVE-2026-13448","cweIds":null,"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow","OpenDsStarAgent","CodeActAgentSmolagents","CSVAgent"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-17T20:17:14.713Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}