CVE-2023-36258: langchain arbitrary code execution vulnerability
An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method.
Published Jul 3, 2023 · Updated Nov 22, 2024
Affected packages
langchain
- Ecosystem
- PyPI
- Affected
- < 0.0.247
- Fixed in
- 0.0.247
- Check
pip show langchain
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method.
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-36258
- https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2023-98.yaml
- https://github.com/langchain-ai/langchain/issues/5872
- https://github.com/langchain-ai/langchain/issues/5872#issuecomment-1697785619
- https://github.com/langchain-ai/langchain/pull/6003
- https://github.com/langchain-ai/langchain/pull/7870
- https://github.com/langchain-ai/langchain/pull/8425
- https://github.com/langchain-ai/langchain/commit/8ba9835b925473655914f63822775679e03ea137
- https://github.com/langchain-ai/langchain/commit/e294ba475a355feb95003ed8f1a2b99942509a9e
- https://github.com/langchain-ai/langchain/commit/fab24457bcf8ede882abd11419769c92bc4e7751
- https://github.com/advisories/GHSA-2qmj-7962-cjq8
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More LangChain vulnerabilities
All LangChain entriesCVE-2026-55443
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
medium5.1Jun 16, 2026CVE-2026-45134
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
high7.1May 13, 2026CVE-2026-44843
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
high8.2May 8, 2026CVE-2026-40087
LangChain has incomplete f-string validation in prompt templates
medium5.3Apr 8, 2026CVE-2026-34070
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
high7.5Mar 27, 2026CVE-2026-27795
LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
medium4.1Feb 25, 2026