Companies/LangChain (LangSmith)/CVEs

LLangChain (LangSmith) CVEs

25 vulnerabilities mapped to LangChain (LangSmith)’s software or packages, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.

• 2026-10-23

  CVE-2026-115883 LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

  CVSS 6.0 mediumEPSS 0.30%

• 2026-10-06

  CVE-2026-106119 LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

  CVSS 6.0 mediumEPSS 0.46%

• 2026-10-06

  CVE-2026-105799 LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

  CVSS 2.3 lowEPSS 0.28%

• 2026-06-22

  CVE-2026-55443 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

  CVSS 5.1 mediumEPSS 0.21%

• 2026-06-16

  CVE-2026-48776 LangGraph SDK has unsafe URL path construction

  CVSS 4.2 mediumEPSS 0.22%

• 2026-06-16

  CVE-2026-48775 LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

  CVSS 6.8 mediumEPSS 0.23%

• 2026-05-26

  CVE-2026-44843 LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

  CVSS 8.2 highEPSS 0.41%

• 2026-04-24

  CVE-2026-41488 angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding

  CVSS 3.1 lowEPSS 0.16%

• 2026-04-24

  CVE-2026-41481 LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

  CVSS 6.5 mediumEPSS 0.26%

• 2026-04-10

  CVE-2026-40190 LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

  CVSS 5.6 mediumEPSS 0.31%

• 2026-04-09

  CVE-2026-40087 LangChain has incomplete f-string validation in prompt templates

  CVSS 5.3 mediumEPSS 0.26%

• 2026-03-31

  CVE-2026-34070 LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

  CVSS 7.5 highEPSS 1.4%

• 2026-03-05

  CVE-2026-28277 LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

  CVSS 6.8 mediumEPSS 4.9%

• 2026-03-04

  CVE-2026-25750 LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

  CVSS 8.1 highEPSS 0.31%

• 2026-02-25

  CVE-2026-27795 LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

  CVSS 4.1 mediumEPSS 0.25%

• 2026-02-11

  CVE-2026-26019 @langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation

  CVSS 4.1 mediumEPSS 0.40%

• 2026-02-10

  CVE-2026-26013 LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

  CVSS 3.7 lowEPSS 0.43%

• 2026-01-12

  CVE-2024-58340 LangChain <= 0.3.1 MRKLOutputParser ReDoS

  CVSS 7.5 highEPSS 0.48%

• 2025-12-23

  CVE-2025-68665 LangChain serialization injection vulnerability enables secret extraction

  CVSS 8.6 highEPSS 0.79%

• 2025-12-23

  CVE-2025-68664 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

  CVSS 9.3 criticalEPSS 42.9%

• 2025-12-10

  CVE-2025-67644 LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method

  CVSS 7.3 highEPSS 2.3%

• 2025-06-23

  CVE-2025-2828 SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

  CVSS 8.4 highEPSS 21.0%

• 2024-10-29

  CVE-2024-8309 SQL Injection in langchain-ai/langchain

  CVSS 4.9 mediumEPSS 13.7%

• 2024-10-29

  CVE-2024-7042 Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

  CVSS 4.9 mediumEPSS 0.31%

• 2024-10-29

  CVE-2024-7774 Path Traversal in langchain-ai/langchainjs

  CVSS 6.5 mediumEPSS 0.56%

All vendors’ CVEs · JSON · Markdown

• CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
• This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
• Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
• EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)