LLangChain AI

Products

Exploited and recent CVEs

• CVE-2026-118668 High 8.6 LangGraph JavaScript custom authentication may permit cross-user Store access 0.4%
• CVE-2026-118667 Medium 4.3 LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests 0.4%
• CVE-2026-118667 Medium 4.3 LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests 0.4%
• CVE-2026-115885 Medium 4.1 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output 0.1%
• CVE-2026-115883 Medium 6.0 LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores 0.3%
• CVE-2026-115883 Medium 6.0 LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores 0.3%
• CVE-2026-115883 Medium 6.0 LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores 0.3%
• CVE-2026-106119 Medium 6.0 LangChain: MongoDBChatMessageHistory query injection can allow cross-session access 0.5%
• CVE-2026-105799 Low 2.3 LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values 0.3%
• CVE-2026-104873 High 7.6 LangGraph SDK custom auth silently ignores actions= on resource decorators 0.3%
• CVE-2026-55253 High 7.7 LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure 0.5%
• CVE-2026-55253 High 7.7 LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure 0.5%
• CVE-2026-55253 High 7.7 LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure 0.5%
• CVE-2026-55235 Medium 5.9 langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication 0.4%
• CVE-2026-55236 Medium 5.9 langgraph-api: Incomplete assistant authorization in LangGraph Server run creation 0.3%
• CVE-2026-72848 High 8.6 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery 0.6%
• CVE-2026-71433 Medium 5.3 LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores 0.4%
• CVE-2026-71433 Medium 5.3 LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores 0.4%
• CVE-2026-71433 Medium 5.3 LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores 0.4%
• CVE-2026-48121 Medium 6.7 @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access 0.4%
• CVE-2026-59152 Medium 5.0 Arbitrary server-side file read in LangSmith SDK TracingMiddleware 0.2%
• CVE-2026-14742 Low 3.1 langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash 0.2%
• CVE-2026-55443 Medium 5.1 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders 0.2%
• CVE-2026-55443 Medium 5.1 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders 0.2%
• CVE-2026-48776 Medium 4.2 LangGraph SDK has unsafe URL path construction 0.2%
• CVE-2026-48776 Medium 4.2 LangGraph SDK has unsafe URL path construction 0.2%
• CVE-2026-48775 Medium 6.8 LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading 0.2%
• CVE-2026-48775 Medium 6.8 LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading 0.2%
• CVE-2026-45134 High 7.1 LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning 0.2%
• CVE-2026-44843 High 8.2 LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists 0.4%