Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GHSA-C67J-W6G6-Q2CM LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

๐Ÿ—“๏ธย 23 Dec 2025ย 18:46:13Reported byย GoogleTypeย 
osv
ย osv๐Ÿ”—ย osv.dev๐Ÿ‘ย 23ย Views

LangChain dumps and dumpd serialization injection allowed secret extraction via unescaped 'lc' keys.

Related
Refs
ReporterTitlePublishedViews
Family
ibm		Security Bulletin: LangChain Serialization Injection Vulnerability in dumps()/dumpd() (Fixed in 0.3.81 / 1.2.5) affects watsonx.data
8 Apr 202610:44
โ€“ibm
ibm		Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.
2 Feb 202604:24
โ€“ibm
ibm		Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Node.js and LangChain
25 Feb 202616:32
โ€“ibm
githubexploit		cve-research
25 Jun 202621:29
โ€“githubexploit
githubexploit		Exploit for CVE-2025-68664
27 Dec 202506:49
โ€“githubexploit
cgr		CVE-2025-68664 vulnerabilities
17 Jan 202601:17
โ€“cgr
circl		CVE-2025-68664
23 Dec 202523:44
โ€“circl
cnnvd		LangChain ไปฃ็ ้—ฎ้ข˜ๆผๆดž
23 Dec 202500:00
โ€“cnnvd
cve		CVE-2025-68664
23 Dec 202522:47
โ€“cve
cvelist		CVE-2025-68664 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
23 Dec 202522:47
โ€“cvelist
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
29 Jun 2026 12:26Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.19.3
EPSS0.1383
serialization injectionsecret extractioninternal serialization keydumps functionload allowlisttrusted namespaceslangchain
23