Critical: Red Hat Security Advisory: Red Hat OpenShift Lightspeed 1.0.9 security update

🗓️ 30 Jan 2026 18:51:47Reported by RedHatType

Red Hat OpenShift Lightspeed 1.0.9 security update fixes LangChain CVE-2025-68664 serialization code execution in operand images.

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: LangChain Serialization Injection Vulnerability in dumps()/dumpd() (Fixed in 0.3.81 / 1.2.5) affects watsonx.data	8 Apr 202610:44	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.	2 Feb 202604:24	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Node.js and LangChain	25 Feb 202616:32	–	ibm
Chainguard	CVE-2025-68664 vulnerabilities	17 Jan 202601:17	–	cgr
Circl	CVE-2025-68664	23 Dec 202523:44	–	circl
CNNVD	LangChain 代码问题漏洞	23 Dec 202500:00	–	cnnvd
CVE	CVE-2025-68664	23 Dec 202522:47	–	cve
Cvelist	CVE-2025-68664 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs	23 Dec 202522:47	–	cvelist
Exploit DB	LangChain Core 1.2.4 - SSTI/RCE	29 Apr 202600:00	–	exploitdb
GithubExploit	Exploit for CVE-2025-68664	27 Dec 202506:49	–	githubexploit

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-68664
access	www.access.redhat.com/security/updates/classification/
docs	www.docs.openshift.com/lightspeed/1.0tp1/about/ols-about-openshift-lightspeed.html

26 May 2026 05:34Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.2 - 9.3

EPSS0.02624

SSVC