Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

langroid

11 known vulnerabilities (6 critical, 5 high), with the versions each affects and the releases that fix them.

Latest release
0.69.21 (Nov 6, 2026): no advisory affects it
Newest unaffected release
0.69.21 (Nov 6, 2026), the latest release
Advisories
11 · 6 critical, 5 high
Weekly downloads
3,614
Dependents
4
Releases
500+ since 0.1.107 (Oct 29, 2023)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 11

  • Langroid: handle_message() executes user-supplied tool JSON without sender verification

    Affected: fixed in 0.65.3.

    Fixed in 0.65.3 (released Jun 9, 2026, 30 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • CVE-2026-54769Critical 10.0

    Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

    Affected: fixed in 0.65.2.

    Fixed in 0.65.2 (released Jun 9, 2026, 30 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • CVE-2026-54760Critical 9.3

    Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

    Affected: fixed in 0.65.1.

    Fixed in 0.65.1 (released Jun 9, 2026, 30 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • Langroid: Path traversal in the file tools allows read/write outside configured current directory

    Affected: fixed in 0.64.0.

    Fixed in 0.64.0 (released May 28, 2026, 42 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read

    Affected: fixed in 0.64.0.

    Fixed in 0.64.0 (released May 28, 2026, 42 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • CVE-2026-55615Critical 9.2

    Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring…

    Affected: fixed in 0.65.5.

    Fixed in 0.65.5 (released Jun 15, 2026, 24 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • CVE-2026-25879Critical 9.8

    Langroid has Prompt to SQL Injection, Leading to RCE

    Affected: fixed in 0.63.0.

    Fixed in 0.63.0 (released May 27, 2026, 5 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • CVE-2026-25481Critical 9.4

    Langroid has WAF Bypass Leading to RCE in TableChatAgent

    Affected: fixed in 0.59.32.

    Fixed in 0.59.32 (released Feb 1, 2026, 3 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

    Affected: fixed in 0.53.15.

    Fixed in 0.53.15 (released May 17, 2025, 3 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • CVE-2025-46724Critical 9.8

    Langroid has a Code Injection vulnerability in TableChatAgent

    Affected: fixed in 0.53.15.

    Fixed in 0.53.15 (released May 17, 2025, 3 days before disclosure).

    The latest release, 0.69.21, is not affected.

  • Langroid Vulnerable to XXE Injection via XMLToolMessage

    Affected: fixed in 0.53.4.

    Fixed in 0.53.4 (released May 3, 2025, 2 days before disclosure).

    The latest release, 0.69.21, is not affected.