CVE-2026-13435

CriticalCVSS 9.9

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

IBM Langflow OSS versions 1.0.0 through 1.10.1 contain an improper input validation vulnerability in the PythonREPL sandbox implementation.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized operations within the sandbox, potentially leading to privilege escalation or arbitrary code execution.

Recommendation

Update IBM Langflow OSS to a version later than 1.10.1 that contains the fix.

Original NVD description (English source)

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.