Critical Langflow Flaws Enable RCE, File Access, and Credential Exposure
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Jul 17, 2026
IBM disclosed multiple severe vulnerabilities in Langflow OSS affecting versions 1.0.0 through 1.10.1, including remote code execution, denial of service, path traversal, unauthorized file and vector store access, build job information disclosure, and exposed credentials through unauthenticated or insufficiently authorized API endpoints. The most prominent issue, CVE-2026-13446, is a hard-coded credentials flaw classified as CWE-798 and scored CVSS 9.8, creating a network-exploitable path to compromise confidentiality, integrity, and availability.
According to IBM's bulletin, the vulnerable endpoints could let attackers execute code, read arbitrary files, access secrets, modify other users' data, and cancel active builds without proper authorization. IBM advised users to upgrade Langflow OSS to 1.10.2 to remediate the issues, as the affected releases expose both application internals and connected external components to critical compromise.
