LangChain vulnerabilities and CVEs
The Beam CVE database tracks 44 security advisories for LangChain: 17 critical, 12 high, 10 medium and 5 low severity. The newest is CVE-2026-55443, published Jun 16, 2026 and fixed in 1.3.9, 1.4.6.
The LangChain framework for Python and JavaScript, including its core and community packages.
Check your version: pip show langchain or pip show langchain-core or pip show langchain-community or pip show langchain-experimental or npm ls langchain or npm ls @langchain/core or npm ls @langchain/community
- Vulnerabilities tracked
- 44
- Critical
- 17
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-55443
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
medium5.1Jun 16, 2026CVE-2026-45134
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
high7.1May 13, 2026CVE-2026-44843
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
high8.2May 8, 2026CVE-2026-40087
LangChain has incomplete f-string validation in prompt templates
medium5.3Apr 8, 2026CVE-2026-34070
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
high7.5Mar 27, 2026CVE-2026-27795
LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
medium4.1Feb 25, 2026CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
low3.7Feb 11, 2026CVE-2026-26019
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
medium4.1Feb 11, 2026CVE-2025-68664
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
critical9.3Dec 23, 2025CVE-2025-68665
LangChain serialization injection vulnerability enables secret extraction
high8.6Dec 23, 2025CVE-2025-65106
LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
high8.3Nov 20, 2025CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
high7.5Sep 4, 2025CVE-2025-2828
LangChain Community SSRF vulnerability exists in RequestsToolkit component
high8.4Jun 23, 2025CVE-2024-10940
langchain-core allows unauthorized users to read arbitrary files from the host file system
medium5.3Mar 20, 2025CVE-2024-7042
@langchain/community SQL Injection vulnerability
low4.9Oct 29, 2024CVE-2024-7774
Langchain Path Traversal vulnerability
medium6.5Oct 29, 2024CVE-2024-8309
Langchain SQL Injection vulnerability
low4.9Oct 29, 2024CVE-2024-46946
LangChain Experimental Eval Injection vulnerability
critical9.8No fixSep 19, 2024CVE-2024-5998
LangChain pickle deserialization of untrusted data
high5.2Sep 17, 2024CVE-2024-21513
langchain-experimental vulnerable to Arbitrary Code Execution
critical8.5Jul 15, 2024CVE-2024-38459
langchain_experimental Code Execution via Python REPL access
high7.8Jun 16, 2024CVE-2024-2965
Denial of service in langchain-community
medium4.2Jun 6, 2024CVE-2024-3095
Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
medium4.8Jun 6, 2024CVE-2024-3571
langchain vulnerable to path traversal
medium6.5Apr 16, 2024CVE-2024-1455
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
medium5.9Mar 26, 2024CVE-2024-28088
LangChain directory traversal vulnerability
lowMar 4, 2024CVE-2024-0243
langchain Server-Side Request Forgery vulnerability
low3.7Feb 26, 2024CVE-2024-27444
LangChain Experimental vulnerable to arbitrary code execution
critical9.8Feb 26, 2024CVE-2023-32785
Langchain SQL Injection vulnerability
critical9.8Oct 21, 2023CVE-2023-32786
Langchain Server-Side Request Forgery vulnerability
high7.5Oct 21, 2023CVE-2023-46229
LangChain Server Side Request Forgery vulnerability
high8.8Oct 19, 2023CVE-2023-44467
langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
critical9.8No fixOct 9, 2023CVE-2023-39631
Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
critical9.8Sep 1, 2023CVE-2023-36281
langchain vulnerable to arbitrary code execution
critical9.8Aug 22, 2023CVE-2023-38860
LangChain vulnerable to arbitrary code execution
critical9.8Aug 15, 2023CVE-2023-38896
LangChain vulnerable to arbitrary code execution
critical9.8Aug 15, 2023CVE-2023-39659
LangChain vulnerable to arbitrary code execution
critical9.8Aug 15, 2023CVE-2023-36095
langchain Code Injection vulnerability
critical9.8Aug 5, 2023CVE-2023-36188
langchain vulnerable to arbitrary code execution
critical9.8Jul 6, 2023CVE-2023-36189
langchain SQL Injection vulnerability
high7.5Jul 6, 2023CVE-2023-36258
langchain arbitrary code execution vulnerability
critical9.8Jul 3, 2023CVE-2023-34541
Langchain vulnerable to arbitrary code execution
critical9.8Jun 20, 2023CVE-2023-34540
Langchain OS Command Injection vulnerability
critical9.8Jun 14, 2023CVE-2023-29374
LangChain vulnerable to code injection
critical9.8No fixApr 5, 2023