CVE-2026-13448

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1

Description An unauthenticated remote code execution issue exists in the public flow build endpoint '/api/v1/build public tmp/{flow id}/flow'. The flaw is caused by an incomplete denylist within the validate public flow no code execution() function, which fails to block specific code-execution agent components such as OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Disable or restrict access to the '/api/v1/build public tmp/{flow id}/flow' endpoint immediately.