Langchain-ai vulnerabilities
55 CVEs and advisories name Langchain-ai as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-27022RediSearch Query Injection in @langchain/langgraph-checkpoint-redis
- CVE-2026-26019@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
- CVE-2026-26013LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
- CVE-2026-25528LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
- CVE-2024-58340LangChain <= 0.3.1 MRKLOutputParser ReDoS
- CVE-2025-68665LangChain serialization injection vulnerability enables secret extraction
- CVE-2025-68664LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
- CVE-2025-67644LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method
- CVE-2025-65106LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
- CVE-2025-64439LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
- CVE-2025-64104LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore
- CVE-2025-8709SQL Injection in langchain-ai/langchain
- CVE-2025-6985XXE Vulnerability in langchain-ai/langchain
- CVE-2025-6984Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain
- CVE-2025-2828SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain
- CVE-2024-10940Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain
- CVE-2024-8309SQL Injection in langchain-ai/langchain
- CVE-2024-7042Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection
- CVE-2024-7774Path Traversal in langchain-ai/langchainjs
- CVE-2024-5998Deserialization of Untrusted Data in langchain-ai/langchain
- CVE-2024-2965Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain
- CVE-2024-3095SSRF in Langchain Web Research Retriever in langchain-ai/langchain
- CVE-2024-3571Path Traversal in langchain-ai/langchain
- CVE-2024-1455Billion Laughs Attack leading to DoS in langchain-ai/langchain
- CVE-2024-0243Server-side Request Forgery In Recursive URL Loader