CVE-2026-13442

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1

Description An issue exists where an attacker can reuse another user's FAISS (Facebook AI Similarity Search, a library for efficient similarity search and clustering of dense vectors) namespace. This allows unauthorized access to vector content intended only for the owner and enables the attacker to influence subsequent query results, leading to cross-user information disclosure and persistent poisoning of returned results.

Recommendations Update IBM Langflow OSS to a version later than 1.10.1.