CVE-2023-39631

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

9.8 CriticalFix available

CVE-2023-39631 is a critical vulnerability (CVSS 9.8) in Langchain, published September 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 76th percentile. Fixed in langchain 0.0.308.

What does this mean?

Severity: 9.8 CriticalCVSS 3.1, NVD
Exploit chance: 1.60%EPSS, 76th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 0.0.308langchain +5 more

Description

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.60%Up 1.5 points since Sep 2, 2023

Affected products

langchain

Affected packages

Affected packages
Package	Affected	Fixed
`langchain` PyPI	before 0.0.308	0.0.308
`numexpr` PyPI	before 2.8.5	2.8.5
`langchain` PyPI	before 0.0.308, plus listed versions 0.0.10.0.100.0.1000.0.1010.0.101rc0 Show 45 moreShow less 0.0.1020.0.102rc00.0.1030.0.1040.0.1050.0.1060.0.1070.0.1080.0.1090.0.110.0.1100.0.1110.0.1120.0.1130.0.1140.0.1150.0.1160.0.1170.0.1180.0.1190.0.120.0.1200.0.1210.0.1220.0.1230.0.1240.0.1250.0.1260.0.1270.0.1280.0.1290.0.130.0.1300.0.1310.0.1320.0.1330.0.1340.0.1350.0.1360.0.1370.0.1380.0.1390.0.140.0.1400.0.141	0.0.308
`numexpr` PyPI	before 2.8.5, plus listed versions 1.1.11.21.31.3.11.4 Show 42 moreShow less 1.4.11.4.22.02.0.12.12.22.2.12.2.22.32.3-rc12.3.12.42.4-rc12.4-rc22.4.12.4.22.4.32.4.42.4.52.4.62.52.5.12.5.22.6.02.6.12.6.22.6.32.6.42.6.52.6.62.6.6.dev02.6.72.6.82.6.92.7.02.7.12.7.22.7.32.8.02.8.12.8.32.8.4	2.8.5
`langchain` PyPI	before 0.0.308, plus listed versions 0.0.10.0.100.0.1000.0.1010.0.101rc0 Show 45 moreShow less 0.0.1020.0.102rc00.0.1030.0.1040.0.1050.0.1060.0.1070.0.1080.0.1090.0.110.0.1100.0.1110.0.1120.0.1130.0.1140.0.1150.0.1160.0.1170.0.1180.0.1190.0.120.0.1200.0.1210.0.1220.0.1230.0.1240.0.1250.0.1260.0.1270.0.1280.0.1290.0.130.0.1300.0.1310.0.1320.0.1330.0.1340.0.1350.0.1360.0.1370.0.1380.0.1390.0.140.0.1400.0.141	0.0.308
`numexpr` Root:PyPI	before 2.8.4+aikido.2	2.8.4+aikido.22.8.4+aikido.32.8.4+aikido.4

What each source reports

NVD Score used9.8

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Record: CVE-2023-39631
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-94
Updated: 2026-11-02

CVE ListNo score

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Record: CVE-2023-39631
Updated: 2026-11-02

EUVDEUVD-2023-0117No score

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Record: EUVD-2023-0117
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f73w-4m7g-ch9x9.8

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Patches: Released in v.0.0.308. numexpr dependency is optional for langchain.

Record: GHSA-f73w-4m7g-ch9x
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-94
Updated: 2026-11-02

OSVGHSA-f73w-4m7g-ch9x9.8

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Patches: Released in v.0.0.308. numexpr dependency is optional for langchain.

Record: GHSA-f73w-4m7g-ch9x
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-94
Updated: 2026-11-02

OSVPYSEC-2023-1629.8

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Record: PYSEC-2023-162
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVPYSEC-2023-1639.8

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Record: PYSEC-2023-163
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVNo score

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Record: CVE-2023-39631
Updated: 2026-11-02

OSVROOT-APP-PYPI-CVE-2023-39631No score

CVE-2023-39631 in numexpr - Patched by Root

Root has patched CVE-2023-39631 in the numexpr package for Root:PyPI. Multiple fixed versions available.

Record: ROOT-APP-PYPI-CVE-2023-39631
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 5 moreShow less

This page doesn't list everything

Left out here: 518 versions. The JSON record has them.