Description
LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| langchain-ai | langchain | >= 1.0.0, < 1.0.7, < 0.3.80 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | open-webui +1 | 0.6.37-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langchain-core | >= 1.0.0, < 1.0.7 | 1.0.7 | GHSA-6qv9-48xg-fc7f |
| PyPI | langchain-core | < 0.3.80 | 0.3.80 | GHSA-6qv9-48xg-fc7f |
| PyPI | langchain-core | < 0.3.80 · >= 1.0.0, < 1.0.7 | 0.3.80, 1.0.7 | PYSEC-2026-1518 |