rewindex

RewindexCVEsLangChain (LangSmith)

CVE-2026-34070: LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

High · CVSS 7.5 (CVSS 3.1)EPSS 1.4%, 72th percentilePublished Updated Assigner: GitHub_M

Description

LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an application passes user-influenced prompt configurations to load_prompt() or load_prompt_from_config(), an attacker can read arbitrary files on the host filesystem, constrained only by file-extension checks (.txt for templates, .json/.yaml for examples). This issue has been patched in version 1.2.22.

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · CWE-22

Tracked companies

LangChain (LangSmith)

Mapped from the CVE’s affected-product data, NVD CPE matches, vendor advisories or package feeds. A mapping means the vendor’s software is named, not that its hosted service was exposed.

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

langchain-ai: langchainRed Hat: OpenShift LightspeedRed Hat: Red Hat Ansible Automation Platform 2Red Hat: Red Hat Ansible Automation Platform 2.5Red Hat: Red Hat OpenShift AI 3.3Red Hat: Red Hat OpenShift AI (RHOAI)

References

All CVEsMarkdownJSON