CVE-2026-55253LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure Exploitation status Not known exploited Fix Affected product L langchain-mongodb Published 09/14/2026 Severity High CVE-2026-55235langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication Exploitation status Not known exploited Fix Affected product L langgraph-api Published 09/14/2026 Severity Medium CVE-2026-55236langgraph-api: Incomplete assistant authorization in LangGraph Server run creation Exploitation status Not known exploited Fix Affected product L langgraph-api Published 09/14/2026 Severity Medium CVE-2026-72848langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery Exploitation status Public exploit Fix Affected product L langchain-community Published 08/20/2026 Severity High CVE-2026-71433LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores Exploitation status Not known exploited Fix Affected product L langgraph Published 08/06/2026 Severity Medium CVE-2026-48121@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access Exploitation status Not known exploited Fix Affected product L langgraphjs Published 08/04/2026 Severity Medium CVE-2026-59152Arbitrary server-side file read in LangSmith SDK TracingMiddleware Exploitation status Not known exploited Fix Affected product L langsmith-sdk Published 07/06/2026 Severity Medium CVE-2026-14742langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash Exploitation status Public exploit Fix Affected product L langgraph Published 07/05/2026 Severity Low CVE-2026-55443LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders Exploitation status Not known exploited Fix Affected product L langchain Published 06/22/2026 Severity Medium CVE-2026-48776LangGraph SDK has unsafe URL path construction Exploitation status Not known exploited Fix Affected product L langchain-ai Published 06/16/2026 Severity Medium CVE-2026-48775LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading Exploitation status Not known exploited Fix Affected product L langgraph Published 06/16/2026 Severity Medium CVE-2026-45134LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning Exploitation status Not known exploited Fix Affected product L langsmith-sdk Published 05/27/2026 Severity High CVE-2026-44843LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists Exploitation status Not known exploited Fix Affected product L langchain Published 05/26/2026 Severity High CVE-2026-41488angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding Exploitation status Not known exploited Fix Not confirmed Affected product L langchain-openai Published 04/24/2026 Severity Low CVE-2026-41481LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass Exploitation status Not known exploited Fix Affected product L langchain-text-splitters Published 04/24/2026 Severity Medium CVE-2026-41182LangSmith SDK: Streaming token events bypass output redaction Exploitation status Not known exploited Fix Not confirmed Affected product L langsmith-sdk Published 04/23/2026 Severity Medium CVE-2026-40190LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` Exploitation status Public exploit Fix Affected product L langsmith-sdk Published 04/10/2026 Severity Medium CVE-2026-40087LangChain has incomplete f-string validation in prompt templates Exploitation status Not known exploited Fix Affected product L langchain Published 04/09/2026 Severity Medium CVE-2026-34070LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions Exploitation status Public exploit Fix Affected product L langchain Published 03/31/2026 Severity High CVE-2026-28277LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading Exploitation status Not known exploited Fix Not confirmed Affected product L langgraph Published 03/05/2026 Severity Medium CVE-2026-25750LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl Exploitation status Not known exploited Fix Not confirmed Affected product H helm Published 03/04/2026 Severity High CVE-2026-27795LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader Exploitation status Not known exploited Fix Not confirmed Affected product L langchainjs Published 02/25/2026 Severity Medium CVE-2026-27794LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution Exploitation status Not known exploited Fix Not confirmed Affected product L langgraph-checkpoint Published 02/25/2026 Severity Medium CVE-2026-27022RediSearch Query Injection in @langchain/langgraph-checkpoint-redis Exploitation status Public exploit Fix Affected product L langgraphjs Published 02/20/2026 Severity Medium CVE-2026-26019@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation Exploitation status Not known exploited Fix Affected product L langchainjs Published 02/11/2026 Severity Medium CVE-2026-26013LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages Exploitation status Not known exploited Fix Affected product L langchain Published 02/10/2026 Severity Low CVE-2026-25528LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection Exploitation status Not known exploited Fix Affected product L langsmith-sdk Published 02/09/2026 Severity Medium CVE-2025-68665LangChain serialization injection vulnerability enables secret extraction Exploitation status Public exploit Fix Not confirmed Affected product L langchainjs Published 12/23/2025 Severity High CVE-2025-68664LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs Exploitation status Public exploit Fix Affected product L langchain Published 12/23/2025 Severity Critical CVE-2025-67644LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method Exploitation status Not known exploited Fix Affected product L langgraph Published 12/10/2025 Severity High CVE-2025-65106LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates Exploitation status Not known exploited Fix Affected product L langchain Published 11/21/2025 Severity High CVE-2025-64439LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer Exploitation status Public exploit Fix Affected product L langgraph Published 11/07/2025 Severity High CVE-2025-64104LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore Exploitation status Public exploit Fix Affected product L langgraph Published 10/29/2025 Severity High CVE-2025-8709SQL Injection in langchain-ai/langchain Exploitation status Public exploit Fix Not confirmed Affected product L langchain-ai/langchain Published 10/26/2025 Severity High CVE-2025-6985XXE Vulnerability in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 10/06/2025 Severity High CVE-2025-6984Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain Exploitation status Public exploit Fix Not confirmed Affected product L langchain-ai/langchain Published 09/04/2025 Severity High CVE-2025-2828SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 06/23/2025 Severity High CVE-2024-10940Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 03/20/2025 Severity Medium CVE-2024-8309SQL Injection in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 10/29/2024 Severity Medium CVE-2024-7042Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection Exploitation status Public exploit Fix Affected product L langchain-ai/langchainjs Published 10/29/2024 Severity Medium CVE-2024-7774Path Traversal in langchain-ai/langchainjs Exploitation status Public exploit Fix Affected product L langchain-ai/langchainjs Published 10/29/2024 Severity Medium CVE-2024-5998Deserialization of Untrusted Data in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 09/17/2024 Severity Medium CVE-2024-2965Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 06/06/2024 Severity Medium CVE-2024-3095SSRF in Langchain Web Research Retriever in langchain-ai/langchain Exploitation status Public exploit Fix Not confirmed Affected product L langchain-ai/langchain Published 06/06/2024 Severity Medium CVE-2024-3571Path Traversal in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 04/16/2024 Severity Medium CVE-2024-1455Billion Laughs Attack leading to DoS in langchain-ai/langchain Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 03/26/2024 Severity Medium CVE-2024-0243Server-side Request Forgery In Recursive URL Loader Exploitation status Public exploit Fix Affected product L langchain-ai/langchain Published 02/24/2024 Severity Low 
