Skip to content
OpenAdvisories

Vendor

langchain-ai

55 known vulnerabilities.

Products

langchain-ai/langchain 12 langgraph 11 langchain 8 langsmith-sdk 5 langchainjs 5 langgraph-api 3 langgraphjs 2 langgraph-checkpoint-sqlite 2 langgraph-checkpoint-postgres 2 langchain-ai/langchainjs 2 helm 1 langchain-ai 1 langchain-sdk 1 langchain-openai 1 langchain-anthropic 1 langchain-mongodb 1 langgraph-checkpoint-mongodb 1 langgraph-store-mongodb 1 langraph-checkpoint 1 langgraph-sdk 1 langchain-text-splitters 1 langgraph-checkpoint 1 langchain-community 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.7
    CVE-2026-48121 Public exploit

    @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

    @langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from con…

    langchain-ai langgraphjs @langchain/langgraph-checkpoint-mongodb npm
  • High 7.5
    CVE-2026-34070 Public exploit

    LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

    LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal…

    langchain-ai langchain langchain-core PyPI
  • Critical 9.3
    CVE-2025-68664 Public exploit EPSS 43%

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys…

    langchain-ai langchain langchain-core PyPI
  • High 7.3
    CVE-2025-67644 Public exploit

    LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers…

    langchain-ai langgraph langgraph-checkpoint-sqlite PyPI
  • Medium 4.9
    CVE-2024-8309 Public exploit EPSS 14%

    SQL Injection in langchain-ai/langchain

    A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting al…

    langchain-ai langchain-ai/langchain langchain langchain-community PyPI
  • Medium 4.8
    CVE-2024-3095 Public exploit

    SSRF in Langchain Web Research Retriever in langchain-ai/langchain

    A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langchain version 0.1.5. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet addresses, all…

    langchain-ai langchain-ai/langchain langchain-community PyPI