GCD AI RADAR
products/langchain-family

LangChain family

Filed as: LangChain, langchain, Langchain, langchain-community, @langchain/community, LangChain Experimental, langchain_experimental, langchain-text-splitters, langchainjs, @langchain/redis, Langchain Helm Charts, LangChain JS, and 12 more

Records
61
Disclosed CVEs
59
Exploited (sev 3–4)
0
CISA KEV flagged
0

Newest record 2026-10-06 · 59 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Patch now: confirmed exploitation or KEV · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for LangChain family has confirmed exploitation or a KEV flag.

Disclosures by month · last 24 months

Nov ’2428 disclosed · peak 4 in Feb ’26Oct ’26

Disclosed CVEs, no confirmed exploitation · 59

  1. 2026-10-06
    CVE-2026-105799
    LangChain Redis Package Filter Injection Vulnerability
    2 Disclosedlangchain · redis
    record AIR-2026-0253NVD ↗
  2. 2026-10-06
    CVE-2026-106119
    CVE-2026-106119: LangChain MongoDBChatMessageHistory Query Injection
    2 Disclosedmongodb · query-injection
    record AIR-2026-0248NVD ↗
  3. 2026-09-14
    CVE-2026-55253
    CVE-2026-55253: LangChain MongoDB integrations vulnerable to query injection
    2 Disclosedlangchain · langgraph · mongodb · query-injection
    record AIR-2026-0111NVD ↗
  4. 2026-08-20
    CVE-2026-72848
    CVE-2026-72848: LangChain SitemapLoader vulnerable to unrestricted sitemap scraping
    2 Disclosedlangchain · ssrf
    record AIR-2026-0089NVD ↗
  5. 2026-07-05
    CVE-2026-14742
    LangGraph Task Result Cache Weak Hash Vulnerability
    2 Disclosedlanggraph · weak-hash
    record AIR-2026-1152NVD ↗
  6. 2026-06-16
    CVE-2026-55443
    CVE-2026-55443: LangChain: Path traversal and sandbox escape in file loaders
    2 Disclosedlangchain · path-traversal · infra_vuln
    record AIR-2026-0748GitHub Advisory Database ↗
  7. 2026-05-13
    CVE-2026-45134
    CVE-2026-45134: LangSmith SDK insecure prompt manifest deserialization
    2 Discloseddeserialization
    record AIR-2026-0655GitHub Advisory Database ↗
  8. 2026-05-08
    CVE-2026-44843
    CVE-2026-44843: LangChain vulnerable to unsafe deserialization
    2 Discloseddeserialization
    record AIR-2026-0630GitHub Advisory Database ↗
  9. 2026-04-24
    CVE-2026-41488
    LangChain langchain-openai TOCTOU DNS rebinding vulnerability
    2 Disclosedssrf · dns-rebinding · langchain
    record AIR-2026-1048NVD ↗
  10. 2026-04-24
    CVE-2026-41481
    LangChain URL validation SSRF vulnerability in HTMLHeaderTextSplitter
    2 Disclosedssrf · langchain
    record AIR-2026-1046NVD ↗
  11. 2026-04-08
    CVE-2026-40087
    CVE-2026-40087: LangChain incomplete f-string validation in prompt templates
    2 Disclosedprompt-template
    record AIR-2026-0562GitHub Advisory Database ↗
  12. 2026-03-27
    CVE-2026-34070
    CVE-2026-34070: LangChain Core Has Path Traversal Vulnerabilities in load_prompt
    2 Disclosedpath-traversal
    record AIR-2026-0522GitHub Advisory Database ↗
  13. 2026-03-05
    CVE-2026-28277
    CVE-2026-28277: LangGraph Unsafe Msgpack Checkpoint Deserialization
    2 Discloseddeserialization · langgraph
    record AIR-2026-0489GitHub Advisory Database ↗
  14. 2026-03-04
    CVE-2026-25750
    CVE-2026-25750: URL parameter injection in Langchain Helm Charts exposing auth tokens
    2 Disclosedlangchain · langsmith · token-theft
    record AIR-2026-0980NVD ↗
  15. 2026-02-26
    CVE-2026-27966
    CVE-2026-27966: Langflow Remote Code Execution in CSV Agent
    2 Disclosedrce · langflow
    record AIR-2026-0484NVD ↗
  16. 2026-02-25
    CVE-2026-27795
    CVE-2026-27795: LangChain Community RecursiveUrlLoader SSRF Bypass
    2 Disclosedssrf · langchain
    record AIR-2026-0476GitHub Advisory Database ↗
  17. 2026-02-11
    CVE-2026-26019
    CVE-2026-26019: LangChain Community RecursiveUrlLoader SSRF Bypass
    2 Disclosedssrf · langchain
    record AIR-2026-0467GitHub Advisory Database ↗
  18. 2026-02-10
    CVE-2026-26013
    CVE-2026-26013: LangChain ChatOpenAI SSRF via Image Token Counting
    2 Disclosedssrf · langchain
    record AIR-2026-0468NVD ↗
  19. 2026-01-12
    CVE-2024-58340
    CVE-2024-58340: LangChain MRKLOutputParser regular expression denial-of-service
    2 Disclosedredos · infra_vuln
    record AIR-2026-0938NVD ↗
  20. 2025-12-23
    CVE-2025-68665
    LangChain JS serialization injection vulnerability CVE-2025-68665
    2 Discloseddeserialization · langchain
    record AIR-2025-0389GitHub Advisory Database ↗
  21. 2025-12-23
    CVE-2025-68664
    LangChain serialization injection vulnerability CVE-2025-68664
    2 Discloseddeserialization · langchain
    record AIR-2025-0388GitHub Advisory Database ↗
  22. 2025-11-20
    CVE-2025-65106
    CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access
    2 Disclosedtemplate-injection · langchain
    record AIR-2025-0375GitHub Advisory Database ↗
  23. 2025-10-26
    CVE-2025-8709
    CVE-2025-8709: SQL injection vulnerability in LangGraph SQLite store
    2 Disclosedsql-injection · langchain
    record AIR-2025-0495NVD ↗
  24. 2025-10-06
    CVE-2025-6985
    CVE-2025-6985: XML External Entity vulnerability in langchain-text-splitters
    2 Disclosedxxe
    record AIR-2025-0491NVD ↗
  25. 2025-09-04
    CVE-2025-6984
    CVE-2025-6984: Langchain Community XML External Entity Vulnerability
    2 Disclosedxxe
    record AIR-2025-0331GitHub Advisory Database ↗
  26. 2025-07-29
    CVE-2025-46059
    Indirect Prompt Injection in LangChain GmailToolkit
    2 Disclosedprompt-injection · langchain
    record AIR-2025-0444NVD ↗
  27. 2025-06-23
    CVE-2025-2828
    CVE-2025-2828: LangChain Community RequestsToolkit SSRF Vulnerability
    2 Disclosedlangchain · ssrf
    record AIR-2025-0297GitHub Advisory Database ↗
  28. 2025-03-20
    CVE-2024-10940
    CVE-2024-10940: LangChain-core arbitrary file read vulnerability
    2 Disclosedarbitrary-file-read
    record AIR-2025-0213GitHub Advisory Database ↗
  29. 2024-10-29
    CVE-2024-7774
    CVE-2024-7774: LangChain Path Traversal Vulnerability
    2 Disclosedpath-traversal · langchain
    record AIR-2024-0195GitHub Advisory Database ↗
  30. 2024-10-29
    CVE-2024-8309
    CVE-2024-8309: LangChain GraphCypherQAChain SQL injection vulnerability
    2 Disclosedsql-injection · prompt-injection
    record AIR-2024-0193GitHub Advisory Database ↗
  31. 2024-10-29
    CVE-2024-7042
    CVE-2024-7042: LangChainJS GraphCypherQAChain SQL injection vulnerability
    2 Disclosedsql-injection · prompt-injection
    record AIR-2024-0192GitHub Advisory Database ↗
  32. 2024-09-19
    CVE-2024-46946
    CVE-2024-46946: LangChain Experimental Eval Injection vulnerability
    2 Disclosedeval-injection · langchain
    record AIR-2024-0170GitHub Advisory Database ↗
  33. 2024-09-17
    CVE-2024-5998
    CVE-2024-5998: LangChain pickle deserialization of untrusted data
    2 Discloseddeserialization · langchain
    record AIR-2024-0167GitHub Advisory Database ↗
  34. 2024-07-15
    CVE-2024-21513
    CVE-2024-21513: langchain-experimental vulnerable to arbitrary code execution
    2 Disclosedcode-execution
    record AIR-2024-0149GitHub Advisory Database ↗
  35. 2024-06-16
    CVE-2024-38459
    CVE-2024-38459: LangChain Experimental Python REPL code execution
    2 Disclosedrce · langchain
    record AIR-2024-0139GitHub Advisory Database ↗
  36. 2024-06-06
    CVE-2024-3095
    CVE-2024-3095: SSRF in langchain-community Web Research Retriever
    2 Disclosedssrf · langchain
    record AIR-2024-0133GitHub Advisory Database ↗
  37. 2024-06-06
    CVE-2024-2965
    CVE-2024-2965: Denial of service in langchain-community SitemapLoader
    2 Discloseddos · recursion
    record AIR-2024-0125GitHub Advisory Database ↗
  38. 2024-04-16
    CVE-2024-3571
    CVE-2024-3571: langchain vulnerable to path traversal
    2 Disclosedpath-traversal
    record AIR-2024-0091GitHub Advisory Database ↗
  39. 2024-03-26
    CVE-2024-1455
    CVE-2024-1455: LangChain XMLOutputParser vulnerable to XXE
    2 Disclosedxxe · langchain
    record AIR-2024-0080GitHub Advisory Database ↗
  40. 2024-03-04
    CVE-2024-28088
    CVE-2024-28088: LangChain directory traversal vulnerability
    2 Discloseddirectory-traversal · langchain
    record AIR-2024-0079GitHub Advisory Database ↗
  41. 2024-03-01
    CVE-2024-2057
    Server-side request forgery in LangChain TFIDFRetriever
    2 Disclosedssrf · langchain
    record AIR-2024-0216NVD ↗
  42. 2024-02-26
    CVE-2024-27444
    CVE-2024-27444: LangChain Experimental vulnerable to arbitrary code execution
    2 Disclosedremote-code-execution
    record AIR-2024-0078GitHub Advisory Database ↗
  43. 2024-02-26
    CVE-2024-0243
    CVE-2024-0243: LangChain Server-Side Request Forgery vulnerability
    2 Disclosedssrf
    record AIR-2024-0077GitHub Advisory Database ↗
  44. 2023-10-21
    CVE-2023-32785
    CVE-2023-32785: Langchain SQL Injection vulnerability
    2 Disclosedlangchain · sql-injection
    record AIR-2023-0065GitHub Advisory Database ↗
  45. 2023-10-20
    CVE-2023-32786
    CVE-2023-32786: Prompt injection and SSRF vulnerability in Langchain
    2 Disclosedssrf
    record AIR-2023-0087NVD ↗
  46. 2023-10-19
    CVE-2023-46229
    CVE-2023-46229: LangChain Server Side Request Forgery vulnerability
    2 Disclosedssrf · langchain
    record AIR-2023-0064GitHub Advisory Database ↗
  47. 2023-10-09
    CVE-2023-44467
    CVE-2023-44467: LangChain Experimental arbitrary code execution
    2 Disclosedrce · langchain
    record AIR-2023-0063GitHub Advisory Database ↗
  48. 2023-09-01
    CVE-2023-39631
    CVE-2023-39631: LangChain arbitrary code execution via numexpr
    2 Disclosedrce · langchain · numexpr
    record AIR-2023-0062GitHub Advisory Database ↗
  49. 2023-08-22
    CVE-2023-36281
    CVE-2023-36281: LangChain arbitrary code execution vulnerability
    2 Disclosedrce · langchain
    record AIR-2023-0061GitHub Advisory Database ↗
  50. 2023-08-15
    CVE-2023-38860
    CVE-2023-38860: LangChain arbitrary code execution vulnerability
    2 Disclosedrce · langchain
    record AIR-2023-0060GitHub Advisory Database ↗
  51. 2023-08-15
    CVE-2023-39659
    CVE-2023-39659: LangChain vulnerable to arbitrary code execution
    2 Disclosedrce
    record AIR-2023-0058GitHub Advisory Database ↗
  52. 2023-08-15
    CVE-2023-38896
    CVE-2023-38896: LangChain vulnerable to arbitrary code execution
    2 Disclosedrce
    record AIR-2023-0057GitHub Advisory Database ↗
  53. 2023-08-05
    CVE-2023-36095
    CVE-2023-36095: langchain Code Injection vulnerability
    2 Disclosedcode-injection
    record AIR-2023-0056GitHub Advisory Database ↗
  54. 2023-07-06
    CVE-2023-36188
    CVE-2023-36188: Langchain vulnerable to arbitrary code execution
    2 Disclosedrce · langchain
    record AIR-2023-0053GitHub Advisory Database ↗
  55. 2023-07-06
    CVE-2023-36189
    CVE-2023-36189: Langchain SQL Injection vulnerability
    2 Disclosedsql-injection · langchain
    record AIR-2023-0052GitHub Advisory Database ↗
  56. 2023-07-03
    CVE-2023-36258
    CVE-2023-36258: Langchain arbitrary code execution vulnerability
    2 Disclosedrce · langchain
    record AIR-2023-0051GitHub Advisory Database ↗
  57. 2023-06-20
    CVE-2023-34541
    CVE-2023-34541: Langchain vulnerable to arbitrary code execution
    2 Disclosedrce · langchain
    record AIR-2023-0050GitHub Advisory Database ↗
  58. 2023-06-14
    CVE-2023-34540
    CVE-2023-34540: Langchain OS Command Injection vulnerability
    2 Disclosedremote-code-execution
    record AIR-2023-0049GitHub Advisory Database ↗
  59. 2023-04-05
    CVE-2023-29374
    CVE-2023-29374: LangChain code injection via LLMMathChain
    2 Disclosedlangchain · code-injection
    record AIR-2023-0041GitHub Advisory Database ↗

Other incidents: research and unexploited reports · 2

  1. 2026-03-31
    RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection
    1 Researchrce · frameworks · prompt-injection
    record AIR-2026-0350MITRE ATLAS ↗
  2. 2023-03-26
    LLM Application Frameworks Allow Remote Code Execution via Prompting
    1 Researchprompt-injection · remote-code-execution · langchain
    record AIR-2023-0005AVID ↗

This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.