Description
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.27 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-255372.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LangChain | langchain_community | 0.0.26 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
dexteon/langchain-tfidf-pickle-rce-cve-2024-2057 ★ 0 · Nov 12, 2026
CVE-2024-2057: LangChain TFIDFRetriever pickle deserialization RCE. Lab-only PoC with harmless payload, detection, remediation. Authorized testing only.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langchain-community | <= 0.0.26 | — | PYSEC-2024-278 |
References
- VDB-255372 | LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery vdb-entry technical-description
- VDB-255372 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- https://github.com/bayuncao/vul-cve-16 broken-link
- https://github.com/bayuncao/vul-cve-16/tree/main/PoC.pkl broken-link exploit
- https://github.com/langchain-ai/langchain/pull/18695 issue-tracking patch