VulnSocial

CVE-2026-13435General(langflow / langflow)

LOWCVSS 9.9 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch langflow langflow systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.

langflow CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • langflow

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-07-31); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
langflow
Products
langflow

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-07-31: 3Mentions · 2026-09-12: 1PoC Mentioned / Linked · 2026-07-31: 1Patch / Workaround · 2026-07-31: 1Technical Details · 2026-07-31: 2Technical Details · 2026-09-12: 107-3109-12
Signal classification3 categories
General
250.0%
Disclosure
125.0%
PoC
125.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-313
Disclosure1General1PoC1
2026-09-121
General1
Full discourse4 posts
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-13435 [HIGH PRIORITY] #Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure 🔗 https://exploitgrid.net/cve/CVE-2026-13435

    Post summary

    CVE-2026-13435 is a high‑priority vulnerability involving a Python interpreter sandbox bypass that can lead to sensitive data exposure; a link to a PoC is provided on exploitgrid, but no active exploitation or patch details are mentioned.

    1000038
    29 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily Threat Digest Top #Vulnerabilities (#CVEs) of the day CVE-2026-48449 CVE-2026-66803 CVE-2026-12946 CVE-2026-13435 CVE-2026-58046 ..🧵👇

    Post summary

    The post is a daily threat digest that simply lists five CVE identifiers without providing any additional details or context.

    1000056
    29 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-13435: IBM Langflow OSS Python Sandbox Code Injection - What It Means for Your Business and How to Respond https://hubs.li/Q04xjNYh0

    Post summary

    The article highlights an IBM Langflow OSS Python sandbox code injection vulnerability (CVE-2026-13435), focusing on its business impact and response strategies, but does not provide PoC, exploit details, or patch information.

    0000044
    35 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨Critical - IBM Langflow PythonREPL Sandbox Escape RCE (CVE-2026-13435) Langflow OSS PythonREPL sandbox improperly validates user-supplied input, letting attackers bypass sandbox restrictions and inject arbitrary Python code via crafted REPL payloads. Impact is full Remote Code Execution in the Langflow runtime. 👉Affected: IBM Langflow OSS (langflow) 1.0.0-1.10.1 | Upgrade to 1.10.2

    Post summary

    The post announces a critical sandbox escape RCE in IBM Langflow OSS (CVE-2026-13435) and notes that the issue is fixed in version 1.10.2.

    0000099
    275 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applangflowlangflow---

Explore more

Back to dashboardlangflow CVEslangflow vulnerabilities