{
 "id": "AIR-2026-0980",
 "slug": "cve-2026-25750-url-parameter-injection-in-langchain-helm-cha",
 "title": "CVE-2026-25750: URL parameter injection in Langchain Helm Charts exposing auth tokens",
 "summary": "A URL parameter injection vulnerability in LangSmith Studio within Langchain Helm Charts prior to version 0.12.71 allowed attackers to steal bearer tokens, user IDs, and workspace IDs via malicious links. The issue impacted both cloud and self-hosted deployments.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langchain Helm Charts",
  "LangSmith Studio"
 ],
 "incident_date": "2026-03-04",
 "incident_date_precision": "day",
 "first_reported": "2026-03-04",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25750",
   "publisher": "NVD",
   "title": "CVE-2026-25750: Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes.",
   "published_at": "2026-03-04"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-25750",
  "langchain",
  "langsmith",
  "token-theft"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}