CVE-2026-13444: IBM Langflow OSS access to other users' vector documents via Chroma

Summary

CVE-2026-13444 affects IBM Langflow OSS versions 1.0.0 through 1.10.1. An attacker can create their own flow with matching Chroma persist_directory and collection_name values to read another user's private vector documents, receiving exact victim content in their workflow output without authorization. The attacker can also insert their own documents into the victim's shared collection namespace. NVD has not yet provided an assessment, and the record is classified under CWE-520.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSimilar attack · The Hacker News
• HighCVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…Similar attack · NVD/CVE Database
• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
• InfoLocation Matters: Sparse Latent-Variance Attacks for Face Privacy against Diffusion PersonalizationSimilar attack · Arxiv (cs.RO + cs.CV security)
• MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySimilar attack · MSRC Security Update Guide