CVE-2026-13444: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creatin

IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.1 has a serious security flaw where attackers can access other users' private vector documents (collections of data stored in Chroma, a vector database system) by creating a flow with matching settings. This allows unauthorized users to read victims' content and even insert their own documents into shared collections, violating access controls.