Langchain vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-46946 langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uCritical 9.8 · Sep 19, 2024
• CVE-2024-21513 Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the databaseHigh 8.5 · Jul 15, 2024
• CVE-2024-38459 langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step.High 7.8 · Jun 16, 2024
• CVE-2024-28088 LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call.High 8.1 · Mar 3, 2024
• CVE-2024-27444 langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code viaCritical 9.8 · Feb 26, 2024
• CVE-2023-32786 In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and poHigh 7.5 · Oct 20, 2023
• CVE-2023-46229 LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.High 8.8 · Oct 19, 2023
• CVE-2023-44467 langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code vCritical 9.8 · Oct 9, 2023
• CVE-2023-39631 An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.Critical 9.8 · Sep 1, 2023
• CVE-2023-36281 An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt.Critical 9.8 · Aug 22, 2023
• CVE-2023-39659 An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run coCritical 9.8 · Aug 15, 2023
• CVE-2023-38896 An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prCritical 9.8 · Aug 15, 2023
• CVE-2023-38860 An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.Critical 9.8 · Aug 15, 2023
• CVE-2023-36095 An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions includCritical 9.8 · Aug 4, 2023
• CVE-2023-36189 SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.High 7.5 · Jul 6, 2023
• CVE-2023-36188 An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.Critical 9.8 · Jul 6, 2023
• CVE-2023-36258 An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.Critical 9.8 · Jul 3, 2023
• CVE-2023-34541 Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.Critical 9.8 · Jun 20, 2023
• CVE-2023-34540 Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper).Critical 9.8 · Jun 14, 2023
• CVE-2023-29374 In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.Critical 9.8 · Apr 4, 2023