CVE-2026-55443: LangChain: Path traversal and sandbox escape in file loaders

# CVE-2026-55443: LangChain: Path traversal and sandbox escape in file loaders

https://gcdradar.vercel.app/incidents/cve-2026-55443-langchain-path-traversal-and-sandbox-escape-i · AIR-2026-0748 · closed 2026-06-16

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-06-16
- AI role: Attack on AI
- Products: LangChain
- CVE ids: CVE-2026-55443
- CVSS: 5.1

## Summary

Several LangChain components that resolve filesystem paths fail to consistently confine resolved paths to intended root directories. This allows glob patterns and symlinks to access unauthorized files outside the configured root.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-22: CVE-2026-55443: LangChain is a framework for building agents and LLM-powered applications. (https://nvd.nist.gov/vuln/detail/CVE-2026-55443)
- 2026-06-16: CVE-2026-55443: LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders (https://github.com/advisories/GHSA-gr75-jv2w-4656)

## Sources

- 2026-06-16 GitHub Advisory Database: CVE-2026-55443: LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders https://github.com/advisories/GHSA-gr75-jv2w-4656
- 2026-06-22 NVD: CVE-2026-55443: LangChain is a framework for building agents and LLM-powered applications. https://nvd.nist.gov/vuln/detail/CVE-2026-55443

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.