Vulnerability · Published Mar 3, 2024 · Assigned by mitre
CVE-2024-28088
High 8.1
In plain English
A high-severity security flaw in the langchain package (PyPI). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | langchain | 0.0.339 | GHSA-h59x-p739-982c |
| PyPI | langchain | 0.1.11 | PYSEC-2024-43 |
| PyPI | langchain-core | 0.1.30 | GHSA-h59x-p739-982c |
| PyPI | langchain-core | 0.1.11 | PYSEC-2024-45 |
Affected products (as reported)
Weakness: CWE-31 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N