CVE-2026-13435
published 2026-07-30CVE-2026-13435: IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.
PriorityP355critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.29%
21.7th percentile
IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | langflow_oss | 1.0.0 – 1.10.1 | — |
| langflow | langflow | >= 1.0.0 < 1.10.2 | 1.10.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.
ghsa_unreviewed·2026-07-30
CVE-2026-13435 [CRITICAL] CWE-94 IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.
IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.
VulDB
IBM Langflow up to 1.10.1 PythonREPL Sandbox input validation
vuldb·2026-07-30·CVSS 9.9
CVE-2026-13435 [CRITICAL] IBM Langflow up to 1.10.1 PythonREPL Sandbox input validation
A vulnerability identified as critical has been detected in IBM Langflow up to 1.10.1. This issue affects some unknown processing of the component PythonREPL Sandbox. This manipulation causes improper input validation.
This vulnerability appears as CVE-2026-13435. The attack may be initiated remotely. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-30
Published