Skip to content
OpenAdvisories

Product · langchain-ai

langchain

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-55443

    LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

    LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affec…

    langchain-ai langchain langchain-anthropic open-webui Wolfi PyPI
  • Medium 5.3
    CVE-2026-40087

    LangChain has incomplete f-string validation in prompt templates

    LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.28, LangChain's f-string prompt-template validation was incomplete in two respects. First, some prompt template classes accepted f-string templates and formatte…

    langchain-ai langchain open-webui langchain-core Wolfi PyPI