EUVD-2026-67816

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

CVE-2026-82285

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

CVE-2026-82285 BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

EUVD-2026-67809

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278

BISHENG versions before 2.6.0 contain an authenticated remote code execution vulnerability in the POST /api/v1/workflow/run_once endpoint. Crafted Code node definitions submitted by authenticated users are executed via exec() without sandboxing , granting access to the filesystem, credentials, an...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

PT-2026-83301

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run once endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/run once endpoint, which executes them with exec...

CVE-2026-82285: Server-Side Request Forgery (SSRF)

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

CVE-2026-82278: Improper Control of Generation of Code

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

PT-2026-83308

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

bisheng-langchain (>=0.3.0b0, <=0.3.7.1), keble-helpers (>=0.0.14, <=0.0.33) +4 more potentially affected by CVE-2026-55443 via langchain (0.1.12)

langchain PYPI version 0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - bisheng-langchain =0.3.0b0, =0.0.14, =0.0.0, =0.1.0, =0.9.0, =0.1.0, =0.1.3 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

bisheng-langchain (0.2.3.1), evo-researcher (0.1.3) +5 more potentially affected by CVE-2026-55443 via langchain (0.0.349)

langchain PYPI version 0.0.349 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - bisheng-langchain 0.2.3.1 - evo-researcher 0.1.3 - friday-agent 0.1.0 - langchain-experimental =0.0.44, =0.14.1, =0.3.0, =0.3.1 Source cves:...

bisheng-langchain (>=0.3.0b0, <=0.3.7.1), keble-helpers (>=0.0.14, <=0.0.33) +4 more potentially affected by CVE-2026-55443 via langchain (0.1.12)

langchain PYPI version 0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - bisheng-langchain =0.3.0b0, =0.0.14, =0.0.0, =0.1.0, =0.9.0, =0.1.0, =0.1.3 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4...

PT-2026-46955

Six live production platforms were compromised during responsible disclosure testing. LiteLLM CVE-2026-30623, Critical, patched, Windsurf CVE-2026-30615, Critical, reported, Bisheng CVE-2026-33224, Critical, patched, and DocsGPT CVE-2026-26015, Critical, patched…...

bisheng-langchain (>=0.3.4, <=0.3.7.1), bsrag-langchain (0.3.8.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.5)

langchain-openai PYPI version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bisheng-langchain =0.3.4, =0.1.4, =0.1.7 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

bisheng-langchain (>=0.3.0b0, <=0.3.4.dev3) potentially affected by CVE-2026-41488 via langchain-openai (0.1.0)

langchain-openai PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bisheng-langchain =0.3.0b0, =0.3.4.dev3 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

bisheng-langchain (>=0.3.4, <=0.3.7.1), bsrag-langchain (0.3.8.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.5)

langchain-openai PYPI version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bisheng-langchain =0.3.4, =0.1.4, =0.1.7 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...