CVE-2026-13444 Missing authorization in Langflow OSS
Attackers can read and modify other users' private vector documents by exploiting missing authorization checks in shared Chroma namespaces.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-13444?
CVE-2026-13444 is a high-severity missing authorization vulnerability in Langflow Langflow, published on 30 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their workflow output despite having no authorization to read the victim's flow. Additionally, the attacker can pollute the victim's collection by inserting their own documents into the shared namespace.
Weakness: CWE-520
Which versions are affected by CVE-2026-13444?
It affects 1 product.
Products include Langflow Langflow.
How do I fix CVE-2026-13444?
No fix has been published for CVE-2026-13444 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-13444 being exploited?
There is no known exploitation of CVE-2026-13444 in the wild and no public exploit code.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-vrqm-44rp-59j5.