CVE-2023-44467
langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
- Record
CVE-2023-44467- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
CVE List No score
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
- Record
CVE-2023-44467- Updated
- 2026-11-02
EUVDEUVD-2023-0109 No score
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
- Record
EUVD-2023-0109- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gjjr-63x4-v8cq
langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
- Record
GHSA-gjjr-63x4-v8cq- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-gjjr-63x4-v8cq
langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
- Record
GHSA-gjjr-63x4-v8cq- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVPYSEC-2023-194
langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.
- Record
PYSEC-2023-194- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
- Record
CVE-2023-44467- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
langchain-experimentalPyPI |
through 0.0.14 | None known |
langchain-experimentalPyPI |
through 0.0.14, plus listed versions 0.0.10.0.100.0.110.0.120.0.13 Show 12 moreShow less0.0.1rc10.0.1rc20.0.1rc30.0.1rc40.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.9 |
None known |
langchain-experimentalPyPI |
before 0.0.15, plus listed versions 0.0.10.0.100.0.110.0.120.0.13 Show 45 moreShow less0.0.140.0.1rc10.0.1rc20.0.1rc30.0.1rc40.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.9v0.0.305v0.0.304v0.0.303v0.0.302v0.0.301v0.0.298v0.0.300v0.0.299v0.0.297v0.0.296v0.0.295v0.0.294v0.0.293v0.0.292v0.0.291v0.0.290v0.0.289v0.0.288v0.0.287v0.0.286v0.0.285v0.0.284v0.0.283v0.0.281v0.0.279v0.0.278v0.0.277v0.0.276v0.0.275v0.0.274v0.0.273v0.0.272 |
0.0.15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-44467 is a critical vulnerability (CVSS 9.8) in Langchain Experimental, published October 9, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. Fixed in langchain-experimental 0.0.15.
References
github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483
nvd.nist.gov/vuln/detail/CVE-2023-44467
pypi.org/project/langchain-experimental/0.0.14
Left out here: 215 versions. The JSON record has them.