Skip to content
Noroxi

LangChain records

49 published records for vendor langchain.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
15
With a fix record
95.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

49 records
  • CVE-2023-29374
    51Plan

    In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec met

    CriticalCVSS 9.8No exploitEPSS 39%

    langchain · langchainApr 4, 2023

  • CVE-2023-46229
    49Plan

    LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an

    HighCVSS 8.8Proof of conceptEPSS 47%

    langchain · langchainOct 19, 2023

  • CVE-2025-2828
    46Plan

    SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

    CriticalCVSS 10.0No exploitEPSS 21%

    langchain · langchainJun 23, 2025

  • CVE-2025-68664
    45Plan

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    HighCVSS 8.2Proof of conceptEPSS 42%

    langchain · langchain coreDec 23, 2025

  • CVE-2024-8309
    43Plan

    SQL Injection in langchain-ai/langchain

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    langchain · langchainOct 29, 2024

  • CVE-2023-36281
    40Plan

    An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    langchain · langchainAug 22, 2023

  • CVE-2023-36188
    40Plan

    An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainJul 6, 2023

  • CVE-2023-38896
    40Plan

    An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and fr

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainAug 15, 2023

  • CVE-2023-34540
    40Plan

    Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIR

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainJun 14, 2023

  • CVE-2023-39631
    39Monitor

    An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr libr

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainSep 1, 2023

  • CVE-2023-39659
    39Monitor

    An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the Pytho

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainAug 15, 2023

  • CVE-2023-38860
    39Monitor

    An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainAug 15, 2023

  • CVE-2024-46946
    39Monitor

    langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sy

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchain-experimentalSep 19, 2024

  • CVE-2023-36095
    39Monitor

    An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affec

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainAug 4, 2023

  • CVE-2023-36258
    39Monitor

    An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be u

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchainJul 3, 2023

  • CVE-2023-44467
    39Monitor

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and exec

    CriticalCVSS 9.8No exploitEPSS 1%

    langchain · langchain experimentalOct 9, 2023

  • CVE-2023-34541
    39Monitor

    Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

    CriticalCVSS 9.8No exploitEPSS 0%

    langchain · langchainJun 20, 2023

  • CVE-2024-27444
    39Monitor

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execut

    CriticalCVSS 9.8No exploitEPSS 0%

    langchain · langchain-experimentalFeb 26, 2024

  • CVE-2024-2057
    39Monitor

    LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

    CriticalCVSS 9.8No exploitEPSS 0%

    langchain · langchainMar 1, 2024

  • CVE-2026-40190
    39Monitor

    LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

    CriticalCVSS 9.8No exploitEPSS 0%

    langchain · langsmithApr 10, 2026

  • CVE-2024-7042
    39Monitor

    Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    langchain · langchainOct 29, 2024

  • CVE-2024-3571
    36Monitor

    Path Traversal in langchain-ai/langchain

    HighCVSS 8.8No exploitEPSS 1%

    langchain · langchainApr 15, 2024

  • CVE-2025-68665
    36Monitor

    LangChain serialization injection vulnerability enables secret extraction

    CriticalCVSS 9.1No exploitEPSS 0%

    langchain · langchain.jsDec 23, 2025

  • CVE-2024-7774
    36Monitor

    Path Traversal in langchain-ai/langchainjs

    CriticalCVSS 9.1No exploitEPSS 0%

    langchain · langchain.jsOct 29, 2024

  • CVE-2026-48776
    36Monitor

    LangGraph SDK has unsafe URL path construction

    CriticalCVSS 9.1No exploitEPSS 0%

    langchain · langgraph-sdkJun 17, 2026