# langroid (PyPI) vulnerabilities 11 known vulnerabilities (6 critical, 5 high), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.69.21 (Nov 6, 2026): no advisory affects it - Newest unaffected release: 0.69.21 (Nov 6, 2026), the latest release - Weekly downloads: 3,614 - Dependents: 4 - Releases: 500+ since 0.1.107 (Oct 29, 2023) - Registry: https://pypi.org/project/langroid/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-54771: 0.1.107 to 0.65.2 (0.65.3 is outside it) - CVE-2026-54769: 0.1.107 to 0.65.1 (0.65.2 is outside it) - CVE-2026-54760: 0.1.107 to 0.65.0 (0.65.1 is outside it) - CVE-2026-50181: 0.1.107 to 0.63.0 (0.64.0 is outside it) - CVE-2026-50180: 0.1.107 to 0.63.0 (0.64.0 is outside it) - CVE-2026-55615: 0.1.107 to 0.65.4 (0.65.5 is outside it) - CVE-2026-25879: 0.1.107 to 0.62.0 (0.63.0 is outside it) - CVE-2026-25481: 0.1.107 to 0.59.31 (0.59.32 is outside it) - CVE-2025-46725: 0.1.107 to 0.53.14 (0.53.15 is outside it) - CVE-2025-46724: 0.1.107 to 0.53.14 (0.53.15 is outside it) - CVE-2025-46726: 0.1.107 to 0.53.2 (0.53.4 is outside it) Older releases aren't stored, so the earliest spans may start sooner. ## Advisories (11) ### [CVE-2026-54771](https://cve.now/CVE-2026-54771): Langroid: handle\_message() executes user-supplied tool JSON without sender verification - Severity: High 8.1 - Published: Jul 9, 2026 - Affected: fixed in 0.65.3. - Fixed in 0.65.3 (released Jun 9, 2026, 30 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-54769](https://cve.now/CVE-2026-54769): Langroid: Sandbox Escape to Remote Code Execution via Incomplete \`eval()\` Mitigation in TableChatAgent - Severity: Critical 10.0 - Published: Jul 9, 2026 - Affected: fixed in 0.65.2. - Fixed in 0.65.2 (released Jun 9, 2026, 30 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-54760](https://cve.now/CVE-2026-54760): Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg\_read\_file calls - Severity: Critical 9.3 - Published: Jul 9, 2026 - Affected: fixed in 0.65.1. - Fixed in 0.65.1 (released Jun 9, 2026, 30 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-50181](https://cve.now/CVE-2026-50181): Langroid: Path traversal in the file tools allows read/write outside configured current directory - Severity: High 7.1 - Published: Jul 9, 2026 - Affected: fixed in 0.64.0. - Fixed in 0.64.0 (released May 28, 2026, 42 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-50180](https://cve.now/CVE-2026-50180): Langroid: SQLChatAgent \_validate\_query blocklist misses pg\_read\_file family enabling arbitrary file read - Severity: High 8.7 - Published: Jul 9, 2026 - Affected: fixed in 0.64.0. - Fixed in 0.64.0 (released May 28, 2026, 42 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-55615](https://cve.now/CVE-2026-55615): Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring… - Severity: Critical 9.2 - Published: Jul 9, 2026 - Affected: fixed in 0.65.5. - Fixed in 0.65.5 (released Jun 15, 2026, 24 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-25879](https://cve.now/CVE-2026-25879): Langroid has Prompt to SQL Injection, Leading to RCE - Severity: Critical 9.8 - Published: Jun 1, 2026 - Affected: fixed in 0.63.0. - Fixed in 0.63.0 (released May 27, 2026, 5 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2026-25481](https://cve.now/CVE-2026-25481): Langroid has WAF Bypass Leading to RCE in TableChatAgent - Severity: Critical 9.4 - Published: Feb 4, 2026 - Affected: fixed in 0.59.32. - Fixed in 0.59.32 (released Feb 1, 2026, 3 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2025-46725](https://cve.now/CVE-2025-46725): Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector\_store - Severity: High 8.1 - Published: May 20, 2025 - Affected: fixed in 0.53.15. - Fixed in 0.53.15 (released May 17, 2025, 3 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2025-46724](https://cve.now/CVE-2025-46724): Langroid has a Code Injection vulnerability in TableChatAgent - Severity: Critical 9.8 - Published: May 20, 2025 - Affected: fixed in 0.53.15. - Fixed in 0.53.15 (released May 17, 2025, 3 days before disclosure). - The latest release, 0.69.21, is not affected. ### [CVE-2025-46726](https://cve.now/CVE-2025-46726): Langroid Vulnerable to XXE Injection via XMLToolMessage - Severity: High 7.8 - Published: May 5, 2025 - Affected: fixed in 0.53.4. - Fixed in 0.53.4 (released May 3, 2025, 2 days before disclosure). - The latest release, 0.69.21, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/langroid Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.