# CVE-2026-13444

## Summary

- **CVE ID:** CVE-2026-13444
- **Severity:** HIGH
- **CVSS Score:** 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
- **CWE:** CWE-520
- **Published:** Jul 30, 2026
- **Last Modified:** Jul 30, 2026

## Description

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their workflow output despite having no authorization to read the victim's flow. Additionally, the attacker can pollute the victim's collection by inserting their own documents into the shared namespace.

## Affected Products

- IBM — Langflow OSS (1.0.0)

## References

- [CNA](https://www.ibm.com/support/pages/node/7279989)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.21%
- **EPSS Percentile:** 11.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._