LangChain family
Filed as: LangChain, langchain, Langchain, langchain-community, @langchain/community, LangChain Experimental, langchain_experimental, langchain-text-splitters, langchainjs, @langchain/redis, Langchain Helm Charts, LangChain JS, and 13 more
Newest record 2026-10-30 · 60 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for LangChain family has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 60
- closed4.3LangChain family CVE-2026-118667: LangGraph SDK Unencoded Identifiers Request Redirection
Disclosed · since 28 Oct 2026 · CVE-2026-118667
AI - closed2.3LangChain family LangChain Redis Package Filter Injection Vulnerability
Disclosed · since 6 Oct 2026 · CVE-2026-105799
AI - closed6.0LangChain family CVE-2026-106119: LangChain MongoDBChatMessageHistory Query Injection
Disclosed · since 6 Oct 2026 · CVE-2026-106119
AI - closed7.7LangChain family CVE-2026-55253: LangChain MongoDB integrations vulnerable to query injection
Disclosed · since 14 Sep 2026 · CVE-2026-55253
AI - closed8.6LangChain family CVE-2026-72848: LangChain SitemapLoader vulnerable to unrestricted sitemap scraping
Disclosed · since 20 Aug 2026 · CVE-2026-72848
AI - closed3.1LangChain family LangGraph Task Result Cache Weak Hash Vulnerability
Disclosed · since 5 Jul 2026 · CVE-2026-14742
AI - closed5.1LangChain family CVE-2026-55443: LangChain: Path traversal and sandbox escape in file loaders
Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-55443
AI - closed7.1LangChain family CVE-2026-45134: LangSmith SDK insecure prompt manifest deserialization
Disclosed · since 13 May 2026 · updated 27 May 2026 · CVE-2026-45134
AI - closed8.2LangChain family CVE-2026-44843: LangChain vulnerable to unsafe deserialization
Disclosed · since 8 May 2026 · updated 26 May 2026 · CVE-2026-44843
AI - closed3.1LangChain family LangChain langchain-openai TOCTOU DNS rebinding vulnerability
Disclosed · since 24 Apr 2026 · CVE-2026-41488
AI - closed6.5LangChain family LangChain URL validation SSRF vulnerability in HTMLHeaderTextSplitter
Disclosed · since 24 Apr 2026 · CVE-2026-41481
AI - closed5.3LangChain family CVE-2026-40087: LangChain incomplete f-string validation in prompt templates
Disclosed · since 8 Apr 2026 · updated 9 Apr 2026 · CVE-2026-40087
AI - closed7.5LangChain family CVE-2026-34070: LangChain Core Has Path Traversal Vulnerabilities in load_prompt
Disclosed · since 27 Mar 2026 · updated 31 Mar 2026 · CVE-2026-34070
AI - closed6.8LangChain family CVE-2026-28277: LangGraph Unsafe Msgpack Checkpoint Deserialization
Disclosed · since 5 Mar 2026 · CVE-2026-28277
AI - closed8.5LangChain family CVE-2026-25750: URL parameter injection in Langchain Helm Charts exposing auth tokens
Disclosed · since 4 Mar 2026 · CVE-2026-25750
AI - closed9.8Langflow CVE-2026-27966: Langflow Remote Code Execution in CSV Agent
Disclosed · since 27 Feb 2026 · updated 27 Feb 2026 · CVE-2026-27966
AI - closed4.1LangChain family CVE-2026-27795: LangChain Community RecursiveUrlLoader SSRF Bypass
Disclosed · since 25 Feb 2026 · CVE-2026-27795
AI - closed4.1LangChain family CVE-2026-26019: LangChain Community RecursiveUrlLoader SSRF Bypass
Disclosed · since 11 Feb 2026 · CVE-2026-26019
AI - closed3.7LangChain family CVE-2026-26013: LangChain ChatOpenAI SSRF via Image Token Counting
Disclosed · since 11 Feb 2026 · updated 11 Feb 2026 · CVE-2026-26013
AI - closed8.7LangChain family CVE-2024-58340: LangChain MRKLOutputParser regular expression denial-of-service
Disclosed · since 12 Jan 2026 · CVE-2024-58340
AI - closed8.6LangChain family LangChain JS serialization injection vulnerability CVE-2025-68665
Disclosed · since 23 Dec 2025 · CVE-2025-68665
AI - closed9.3LangChain family LangChain serialization injection vulnerability CVE-2025-68664
Disclosed · since 23 Dec 2025 · CVE-2025-68664
AI - closed8.3LangChain family CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access
Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-65106
AI - closed7.3LangChain family CVE-2025-8709: SQL injection vulnerability in LangGraph SQLite store
Disclosed · since 26 Oct 2025 · CVE-2025-8709
AI - closed7.5LangChain family CVE-2025-6985: XML External Entity vulnerability in langchain-text-splitters
Disclosed · since 6 Oct 2025 · CVE-2025-6985
AI - closed7.5LangChain family CVE-2025-6984: Langchain Community XML External Entity Vulnerability
Disclosed · since 4 Sep 2025 · CVE-2025-6984
AI - closed9.8LangChain family Indirect Prompt Injection in LangChain GmailToolkit
Disclosed · since 29 Jul 2025 · CVE-2025-46059
AI - closed8.4LangChain family CVE-2025-2828: LangChain Community RequestsToolkit SSRF Vulnerability
Disclosed · since 23 Jun 2025 · CVE-2025-2828
AI - closed5.3LangChain family CVE-2024-10940: LangChain-core arbitrary file read vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-10940
AI - closed6.9LangChain family CVE-2024-7774: LangChain Path Traversal Vulnerability
Disclosed · since 29 Oct 2024 · CVE-2024-7774
AI - closed4.9LangChain family CVE-2024-8309: LangChain GraphCypherQAChain SQL injection vulnerability
Disclosed · since 29 Oct 2024 · CVE-2024-8309
AI - closed4.9LangChain family CVE-2024-7042: LangChainJS GraphCypherQAChain SQL injection vulnerability
Disclosed · since 29 Oct 2024 · CVE-2024-7042
AI - closed9.8LangChain family CVE-2024-46946: LangChain Experimental Eval Injection vulnerability
Disclosed · since 19 Sep 2024 · CVE-2024-46946
AI - closed8.4LangChain family CVE-2024-5998: LangChain pickle deserialization of untrusted data
Disclosed · since 17 Sep 2024 · CVE-2024-5998
AI - closed9.0LangChain family CVE-2024-21513: langchain-experimental vulnerable to arbitrary code execution
Disclosed · since 15 Jul 2024 · CVE-2024-21513
AI - closed7.8LangChain family CVE-2024-38459: LangChain Experimental Python REPL code execution
Disclosed · since 16 Jun 2024 · CVE-2024-38459
AI - closed4.8LangChain family CVE-2024-3095: SSRF in langchain-community Web Research Retriever
Disclosed · since 6 Jun 2024 · CVE-2024-3095
AI - closed4.2LangChain family CVE-2024-2965: Denial of service in langchain-community SitemapLoader
Disclosed · since 6 Jun 2024 · CVE-2024-2965
AI - closed6.5LangChain family CVE-2024-3571: langchain vulnerable to path traversal
Disclosed · since 16 Apr 2024 · CVE-2024-3571
AI - closed5.9LangChain family CVE-2024-1455: LangChain XMLOutputParser vulnerable to XXE
Disclosed · since 26 Mar 2024 · CVE-2024-1455
AI - closed8.1LangChain family CVE-2024-28088: LangChain directory traversal vulnerability
Disclosed · since 4 Mar 2024 · CVE-2024-28088
AI - closed6.3LangChain family Server-side request forgery in LangChain TFIDFRetriever
Disclosed · since 1 Mar 2024 · CVE-2024-2057
AI - closed9.8LangChain family CVE-2024-27444: LangChain Experimental vulnerable to arbitrary code execution
Disclosed · since 26 Feb 2024 · CVE-2024-27444
AI - closed3.7LangChain family CVE-2024-0243: LangChain Server-Side Request Forgery vulnerability
Disclosed · since 26 Feb 2024 · CVE-2024-0243
AI - closed9.8LangChain family CVE-2023-32785: Langchain SQL Injection vulnerability
Disclosed · since 21 Oct 2023 · CVE-2023-32785
AI - closed7.5LangChain family CVE-2023-32786: Prompt injection and SSRF vulnerability in Langchain
Disclosed · since 20 Oct 2023 · CVE-2023-32786
AI - closed8.8LangChain family CVE-2023-46229: LangChain Server Side Request Forgery vulnerability
Disclosed · since 19 Oct 2023 · CVE-2023-46229
AI - closed9.8LangChain family CVE-2023-44467: LangChain Experimental arbitrary code execution
Disclosed · since 9 Oct 2023 · CVE-2023-44467
AI - closed9.8LangChain family CVE-2023-39631: LangChain arbitrary code execution via numexpr
Disclosed · since 1 Sep 2023 · CVE-2023-39631
AI - closed9.8LangChain family CVE-2023-36281: LangChain arbitrary code execution vulnerability
Disclosed · since 22 Aug 2023 · CVE-2023-36281
AI - closed9.8LangChain family CVE-2023-38860: LangChain arbitrary code execution vulnerability
Disclosed · since 15 Aug 2023 · CVE-2023-38860
AI - closed9.8LangChain family CVE-2023-39659: LangChain vulnerable to arbitrary code execution
Disclosed · since 15 Aug 2023 · CVE-2023-39659
AI - closed9.8LangChain family CVE-2023-38896: LangChain vulnerable to arbitrary code execution
Disclosed · since 15 Aug 2023 · CVE-2023-38896
AI - closed9.8LangChain family CVE-2023-36095: langchain Code Injection vulnerability
Disclosed · since 5 Aug 2023 · CVE-2023-36095
AI - closed9.8LangChain family CVE-2023-36188: Langchain vulnerable to arbitrary code execution
Disclosed · since 6 Jul 2023 · CVE-2023-36188
AI - closed8.7LangChain family CVE-2023-36189: Langchain SQL Injection vulnerability
Disclosed · since 6 Jul 2023 · CVE-2023-36189
AI - closed9.8LangChain family CVE-2023-36258: Langchain arbitrary code execution vulnerability
Disclosed · since 3 Jul 2023 · CVE-2023-36258
AI - closed9.8LangChain family CVE-2023-34541: Langchain vulnerable to arbitrary code execution
Disclosed · since 20 Jun 2023 · CVE-2023-34541
AI - closed9.8LangChain family CVE-2023-34540: Langchain OS Command Injection vulnerability
Disclosed · since 14 Jun 2023 · CVE-2023-34540
AI - closed9.8LangChain family CVE-2023-29374: LangChain code injection via LLMMathChain
Disclosed · since 5 Apr 2023 · CVE-2023-29374
AI
Other incidents: research and unexploited reports · 3
- closedLangChain family Poisoned Skills: Propagating Jailbreaks Through Agent Markdown Files
Research · since 30 Oct 2026
AI - closedLangChain family RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection
Research · since 27 Feb 2025
AI - closedChatGPT LLM Application Frameworks Allow Remote Code Execution via Prompting
Research · since 26 Mar 2023 · updated 31 Mar 2023
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.