CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access

# CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access

https://gcdradar.vercel.app/incidents/cve-2025-65106-langchain-vulnerable-to-template-injection-vi · AIR-2025-0375 · closed 2025-11-20

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-11-20
- AI role: Attack on AI
- Products: LangChain
- CVE ids: CVE-2025-65106
- CVSS: 8.3

## Summary

A template injection vulnerability in LangChain allows attackers to access Python object internals through template syntax in prompt templates. A patch has been provided by the maintainers.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-11-21: CVE-2025-65106: LangChain is a framework for building agents and LLM-powered applications. (https://nvd.nist.gov/vuln/detail/CVE-2025-65106)
- 2025-11-20: CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates (https://github.com/advisories/GHSA-6qv9-48xg-fc7f)

## Sources

- 2025-11-20 GitHub Advisory Database: CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates https://github.com/advisories/GHSA-6qv9-48xg-fc7f
- 2025-11-21 NVD: CVE-2025-65106: LangChain is a framework for building agents and LLM-powered applications. https://nvd.nist.gov/vuln/detail/CVE-2025-65106

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.