Skip to contentLangchain-ai Langchain vulnerabilities
- @feathersjs mongodb, langchain-ai langchainjs +1 moreLangChain: MongoDBChatMessageHistory query injection can allow cross-session accessCVE-2026-106119Fix available6.0 Medium
- @langchain redis, langchain-ai langchainjs +1 moreLangChain: RediSearch Filter Injection via Unescaped Tag/Text ValuesCVE-2026-105799Fix available2.3 Low
- langchain-ai langchain-communitylangchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request ForgeryCVE-2026-728487.7 High
- langchain-ai langgraph-checkpoint-mongodb, langgraph-store-mongodb, langchain-mongodb +2 moreLangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposureCVE-2026-55253Fix available7.7 High
- langchain langgraph-sdk, langchain-ai, langchain-ai langchain-sdk +2 moreLangGraph SDK has unsafe URL path constructionCVE-2026-48776Fix available4.2 Medium
- langchain, langchain-ai langchain-anthropic +1 moreLangChain: Path traversal and sandbox escape in LangChain file-search middleware and loadersCVE-2026-55443Fix available5.1 Medium
- langchainLangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlistsCVE-2026-44843Fix available8.2 High
- langchain langchain-openaiangchain-openai: Image token counting SSRF protection can be bypassed via DNS rebindingCVE-2026-41488Fix available3.1 Low
- langchain langchain-text-splitters, red hat migration toolkit for applications 8, openshift lightspeed +2 more +4 moreLangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect BypassCVE-2026-41481Fix available6.5 Medium
- langchain-ai langchain, langchain core +1 moreLangChain has incomplete f-string validation in prompt templatesCVE-2026-40087Fix available5.3 Medium
- langchain core, langchain-ai langchain, red hat openshift lightspeed +4 more +6 moreLangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsCVE-2026-34070Public exploitFix available7.5 High
- langchain community, langchain-ai langchainjs +1 moreLangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoaderCVE-2026-27795Fix available4.1 Medium
- langchain community, langchain-ai langchainjs +1 more@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationCVE-2026-26019Fix available4.1 Medium
- langchain-ai langchain, langchain core +1 moreLangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messagesCVE-2026-26013Fix available3.7 Low
- langchainLangChain <= 0.3.1 MRKLOutputParser ReDoSCVE-2024-58340Fix available8.7 High
- langchain langchain.js, langchain\/core, langchain-ai langchainjs +2 moreLangChain serialization injection vulnerability enables secret extractionCVE-2025-68665Fix available8.6 High
- langchain-ai langchain, langchain core +1 moreLangChain serialization injection vulnerability enables secret extraction in dumps/loads APIsCVE-2025-68664Public exploitFix availableEPSS 42.9%9.3 Critical
- langchain-ai langchainLangChain Vulnerable to Template Injection via Attribute Access in Prompt TemplatesCVE-2025-65106Fix available8.3 High
- langchain-ai langchain-ai/langchainSQL Injection in langchain-ai/langchainCVE-2025-8709Fix available7.3 High
- langchain-ai langchain-ai/langchainXXE Vulnerability in langchain-ai/langchainCVE-2025-6985Fix available7.5 High
- langchain-ai langchain-ai/langchainSensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchainCVE-2025-6984Fix available7.5 High
- langchain, langchain-ai langchain-ai/langchain +1 moreSSRF Vulnerability in RequestsToolkit in langchain-ai/langchainCVE-2025-2828Fix availableEPSS 21.0%8.4 High
- langchain-ai langchain-ai/langchainExposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchainCVE-2024-10940Fix available5.3 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreSQL Injection in langchain-ai/langchainCVE-2024-8309Public exploitFix availableEPSS 13.7%4.9 Medium
- langchain, langchain-ai langchain-ai/langchainjs, langchainjs +2 morePrompt Injection in langchain-ai/langchainjs Leading to SQL InjectionCVE-2024-7042Fix available4.9 Medium
- langchain-ai langchain-ai/langchainjs, langchain langchain.js, langchain-ai langchain-ai\/langchainjs +2 morePath Traversal in langchain-ai/langchainjsCVE-2024-7774Fix available6.5 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreDeserialization of Untrusted Data in langchain-ai/langchainCVE-2024-5998Fix available5.2 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreDenial-of-Service in LangChain SitemapLoader in langchain-ai/langchainCVE-2024-2965Fix available4.2 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreSSRF in Langchain Web Research Retriever in langchain-ai/langchainCVE-2024-3095Public exploitFix available4.8 Medium
- langchain, langchain-ai langchain-ai/langchain +1 morePath Traversal in langchain-ai/langchainCVE-2024-3571Fix available6.5 Medium
- langchain, langchain-ai langchain-ai/langchain, langchain-ai\/langchain +2 moreBillion Laughs Attack leading to DoS in langchain-ai/langchainCVE-2024-1455Fix available5.9 Medium
- langchain, langchain-ai langchain-ai/langchain, langchain-ai\/langchain +2 moreServer-side Request Forgery In Recursive URL LoaderCVE-2024-0243Fix available3.7 Low