{"vulnerability": "cve-2026-13448", "sightings": [{"uuid": "3b94acf4-d619-43d4-9c30-d2b97af16be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquss3f7uk2a", "content": "CVE-2026-13448 - Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-13448\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes a...", "creation_timestamp": "2026-07-17T22:36:30.940994Z"}, {"uuid": "ecfebdcc-e9cf-4d1d-b122-6a32aac22d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvixu56322t", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:26.838694Z"}, {"uuid": "ed07d2c3-d526-449d-8fe1-eac0879738a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116939267895244968", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:42.994837Z"}, {"uuid": "3f549aad-9c9d-4d3f-a196-ac170d9d79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtutqkpt22", "content": "\ud83d\udfe0 CVE-2026-13448 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T18:01:17.270789Z"}, {"uuid": "ab466ad6-4057-434d-8196-098ee2c312b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x777nmh2v", "content": "CVE-2026-13448 - langflow oss\nLangflow's public API has unauthenticated endpoints that can be exploited for remote code execution and denial of service attacks. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-20T18:44:04.203781Z"}, {"uuid": "219cea55-5593-43bd-8183-c8b0639dfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6flzrvck2v", "content": "\ud83d\udccc CVE-2026-13448 - IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( ... https://www.cyberhub.blog/cves/CVE-2026-13448", "creation_timestamp": "2026-07-21T18:07:06.790266Z"}]}