CVE database · Agent frameworks and SDKs
LangSmith SDK vulnerabilities and CVEs
The Beam CVE database tracks 4 security advisories for LangSmith SDK: 2 high and 2 medium severity. The newest is GHSA-f4xh-w4cj-qxq8, published Jun 19, 2026 and fixed in 0.8.18.
The client SDK for LangSmith tracing and evaluation.
Check your version: pip show langsmith
- Vulnerabilities tracked
- 4
- Critical
- 0
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
GHSA-f4xh-w4cj-qxq8
LangSmith SDK TracingMiddleware: Arbitrary server-side file read
high7.7Jun 19, 2026CVE-2026-45134
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
high7.1May 13, 2026CVE-2026-41182
LangSmith SDK: Streaming token events bypass output redaction
medium5.3Apr 16, 2026CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
medium5.8Feb 9, 2026