CVE-2024-27444

2024-02-2616:28:00

[email protected]

web.nvd.nist.gov

2706

cve-2024-27444

langchain

langchain experimental

bypass

arbitrary code

python

security vulnerability

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by pal_chain/base.py.