CVE-2026-13446

CriticalCVSS 9.8

Published: 17/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

IBM Langflow OSS versions 1.0.0 through 1.10.1 contain hard-coded credentials (passwords or cryptographic keys) used for inbound authentication, outbound communication, or internal data encryption.

Risk Assessment

An attacker can exploit these hard-coded credentials to gain unauthorized access, intercept communications, or decrypt sensitive data.

Recommendation

Immediately upgrade to a version later than 1.10.1 and replace all default credentials with unique, strong passwords.

Original NVD description (English source)

IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.