Lucene search
+L

7 matches found

CNVD
CNVD
•added 2026/07/30 12:00 a.m.•31 views

IBM Langflow OSS configuration error vulnerability

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications through drag-and-drop components. Additionally, it supports deep customization using Python to integrate...

7.1CVSS6AI score0.00295EPSS
SaveExploits0
NVD
NVD
•added 2026/07/28 9:17 p.m.•27 views

CVE-2026-13442

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

7.1CVSS0.00295EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/28 8:55 p.m.•18 views

CVE-2026-13442

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/07/28 8:55 p.m.•85 views

CVE-2026-13442

Langflow OSS versions 1.0.0–1.10.1 are affected by CVE-2026-13442. An attacker could reuse another user’s FAISS namespace to access owner‑only vector content and influence later query results, enabling cross‑user information disclosure and limited integrity impact via persistent poisoning of resu...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/07/28 8:55 p.m.•27 views

EUVD-2026-50066

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/28 12:00 a.m.•8 views

CVE-2026-13442: .NET Misconfiguration: Use of Impersonation

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•29 views

PT-2026-65596

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An issue exists where an attacker can reuse another user's FAISS Facebook AI Similarity Search, a library for efficient similarity search and clustering of dense vectors namespace. Thi...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References5
Rows per page
Query Builder