Langchain-ai vulnerabilities

Products

• Langchain-ai/langchain 12
• Langgraph 11
• Langchain 10
• Langchainjs 6
• Langsmith-sdk 5
• Langgraph-api 3
• Langchain-ai\/langchain 2
• Langchain-ai/langchainjs 2
• Langgraph-checkpoint-postgres 2
• Langgraph-checkpoint-sqlite 2
• Langgraphjs 2

Newest

• langchain-ai langgraph-api LangGraph JavaScript custom authentication may permit cross-user Store access CVE-2026-118668 Fix available 8.6 HighOctober 28, 2026
• langchain-ai langgraph, langgraph-sdk +1 more LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests CVE-2026-118667 Fix available 4.3 MediumOctober 28, 2026
• langchain-ai langgraph LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output CVE-2026-115885 Fix available 4.1 MediumOctober 23, 2026
• langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 more LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores CVE-2026-115883 Fix available 6.0 MediumOctober 23, 2026
• @feathersjs mongodb, langchain-ai langchainjs +1 more LangChain: MongoDBChatMessageHistory query injection can allow cross-session access CVE-2026-106119 Fix available 6.0 MediumOctober 6, 2026
• @langchain redis, langchain-ai langchainjs +1 more LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values CVE-2026-105799 Fix available 2.3 LowOctober 6, 2026
• langchain-ai langgraph LangGraph SDK custom auth silently ignores actions= on resource decorators CVE-2026-104873 Fix available 7.6 HighOctober 2, 2026
• langchain-ai langchain-community langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery CVE-2026-72848 7.7 HighAugust 20, 2026
• langchain-ai langgraph-checkpoint-mongodb, langgraph-store-mongodb, langchain-mongodb +2 more LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure CVE-2026-55253 Fix available 7.7 HighAugust 20, 2026
• langchain-ai langgraph-api langgraph-api: Incomplete assistant authorization in LangGraph Server run creation CVE-2026-55236 Fix available 5.9 MediumAugust 19, 2026
• langchain-ai langgraph-api langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication CVE-2026-55235 Fix available 5.9 MediumAugust 19, 2026
• langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 more LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores CVE-2026-71433 Fix available 5.3 MediumAugust 6, 2026
• langchain-ai langgraph langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash CVE-2026-14742 2.3 LowJuly 5, 2026
• langchain-ai langsmith-sdk Arbitrary server-side file read in LangSmith SDK TracingMiddleware CVE-2026-59152 Fix available 5.0 MediumJune 19, 2026
• langchain langgraph-sdk, langchain-ai, langchain-ai langchain-sdk +2 more LangGraph SDK has unsafe URL path construction CVE-2026-48776 Fix available 4.2 MediumJune 16, 2026
• langchain-ai langgraph, langchain langgraph-checkpoint, langchain-ai langraph-checkpoint +2 more LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading CVE-2026-48775 Fix available 6.8 MediumJune 16, 2026
• langchain, langchain-ai langchain-anthropic +1 more LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders CVE-2026-55443 Fix available 5.1 MediumJune 16, 2026
• langchain-ai langgraphjs @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access CVE-2026-48121 Public exploitFix available 6.7 MediumJune 12, 2026
• langchain-ai langsmith-sdk LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2026-45134 Fix available 7.1 HighMay 13, 2026
• langchain LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists CVE-2026-44843 Fix available 8.2 HighMay 8, 2026
• langchain langchain-openai angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding CVE-2026-41488 Fix available 3.1 LowApril 16, 2026
• langchain langchain-text-splitters, red hat migration toolkit for applications 8, openshift lightspeed +2 more +4 more LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass CVE-2026-41481 Fix available 6.5 MediumApril 16, 2026
• langchain-ai langsmith-sdk LangSmith SDK: Streaming token events bypass output redaction CVE-2026-41182 Fix available 5.3 MediumApril 16, 2026
• langchain langsmith, langchain-ai langsmith-sdk +1 more LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` CVE-2026-40190 Fix available 5.6 MediumApril 10, 2026
• langchain-ai langchain, langchain core +1 more LangChain has incomplete f-string validation in prompt templates CVE-2026-40087 Fix available 5.3 MediumApril 8, 2026
• langchain core, langchain-ai langchain, red hat openshift lightspeed +4 more +6 more LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions CVE-2026-34070 Public exploitFix available 7.5 HighMarch 27, 2026
• langchain langgraph LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading CVE-2026-28277 Fix available 6.8 MediumMarch 5, 2026
• helm, langchain langsmith +1 more LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl CVE-2026-25750 8.5 HighMarch 4, 2026
• langchain community, langchain-ai langchainjs +1 more LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader CVE-2026-27795 Fix available 4.1 MediumFebruary 25, 2026
• langchain-ai langgraph-checkpoint LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution CVE-2026-27794 Fix available 6.6 MediumFebruary 25, 2026
• langchain-ai langgraphjs RediSearch Query Injection in @langchain/langgraph-checkpoint-redis CVE-2026-27022 Fix available 6.5 MediumFebruary 18, 2026
• langchain community, langchain-ai langchainjs +1 more @langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation CVE-2026-26019 Fix available 4.1 MediumFebruary 11, 2026
• langchain-ai langchain, langchain core +1 more LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages CVE-2026-26013 Fix available 3.7 LowFebruary 10, 2026
• langchain-ai langsmith-sdk LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection CVE-2026-25528 Fix available 5.8 MediumFebruary 9, 2026
• langchain LangChain <= 0.3.1 MRKLOutputParser ReDoS CVE-2024-58340 Fix available 8.7 HighJanuary 12, 2026
• langchain langchain.js, langchain\/core, langchain-ai langchainjs +2 more LangChain serialization injection vulnerability enables secret extraction CVE-2025-68665 Fix available 8.6 HighDecember 23, 2025
• langchain-ai langchain, langchain core +1 more LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs CVE-2025-68664 Public exploitFix available EPSS 42.9% 9.3 CriticalDecember 23, 2025
• langchain-ai langgraph, langchain langgraph-checkpoint-sqlite +1 more LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method CVE-2025-67644 Public exploitFix available 7.3 HighDecember 10, 2025
• langchain-ai langchain LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates CVE-2025-65106 Fix available 8.3 HighNovember 20, 2025
• langchain-ai langgraph LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer CVE-2025-64439 Fix available 7.4 HighNovember 5, 2025
• langchain-ai langgraph LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore CVE-2025-64104 Fix available 7.3 HighOctober 29, 2025
• langchain-ai langchain-ai/langchain SQL Injection in langchain-ai/langchain CVE-2025-8709 Fix available 7.3 HighOctober 26, 2025
• langchain-ai langchain-ai/langchain XXE Vulnerability in langchain-ai/langchain CVE-2025-6985 Fix available 7.5 HighOctober 6, 2025
• langchain-ai langchain-ai/langchain Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain CVE-2025-6984 Fix available 7.5 HighSeptember 4, 2025
• langchain, langchain-ai langchain-ai/langchain +1 more SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain CVE-2025-2828 Fix available EPSS 21.0% 8.4 HighJune 23, 2025
• langchain-ai langchain-ai/langchain Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain CVE-2024-10940 Fix available 5.3 MediumMarch 20, 2025
• langchain, langchain-ai langchain-ai/langchain +1 more SQL Injection in langchain-ai/langchain CVE-2024-8309 Public exploitFix available EPSS 13.7% 4.9 MediumOctober 29, 2024
• langchain, langchain-ai langchain-ai/langchainjs, langchainjs +2 more Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection CVE-2024-7042 Fix available 4.9 MediumOctober 29, 2024
• langchain-ai langchain-ai/langchainjs, langchain langchain.js, langchain-ai langchain-ai\/langchainjs +2 more Path Traversal in langchain-ai/langchainjs CVE-2024-7774 Fix available 6.5 MediumOctober 29, 2024
• langchain, langchain-ai langchain-ai/langchain +1 more Deserialization of Untrusted Data in langchain-ai/langchain CVE-2024-5998 Fix available 5.2 MediumSeptember 17, 2024
• Show olderLoading…