{
 "id": "AIR-2026-1197",
 "slug": "cve-2026-13448-ibm-langflow-oss-public-flow-build-rce-vulner",
 "title": "CVE-2026-13448: IBM Langflow OSS Public Flow Build RCE Vulnerability",
 "summary": "IBM Langflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint due to an incomplete denylist of agent components. An advisory was released addressing the flaw without reported exploitation.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow OSS"
 ],
 "incident_date": "2026-07-17",
 "incident_date_precision": "day",
 "first_reported": "2026-07-17",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13448",
   "publisher": "NVD",
   "title": "CVE-2026-13448: IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public…",
   "published_at": "2026-07-17"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-13448",
  "langflow",
  "rce"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}