CVE-2026-13444

Description

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user-s private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their workflow output despite having no authorization to read the victim-s flow. Additionally, the attacker can pollute the victim-s collection by inserting their own documents into the shared namespace.