CVE-2026-13448

High

Description

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). The vulnerability stems from an incomplete denylist in the validate_public_flow_no_code_execution() function that fails to block several code-execution agent components including OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent.

SeverityHigh

CVSS8.1

Exploit probability—

Product

Langflow

PublishedJul 17, 2026

First seenJul 17, 2026

Weakness typeCWE-184CWE-184

How to fix

Update

langflow langflow1.10.2 or later

Patches

ibm.com/support/pages/node/7279997

Affected products

Product	Affected versions	Fixed in
langflow langflow	1.0.0 ≤ v < 1.10.2	1.10.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.