Langchain-Chatchat <= 0.3.1.3 - Unauthenticated RCE

Langchain-Chatchat = 0.3.1.3 contains a command injection caused by unauthenticated access to the /tools/call API endpoint invoking the shell tool, letting remote attackers execute arbitrary OS commands as root, exploit requires no authentication. id: CVE-2026-75128 info: name: Langchain-Chatchat...

CVE-2025-68664

CVE-2025-68664 All I Want for Christmas Is Your Secrets: LangGrinch Strikes LangChain Core CVE-2025-68664 Author: Yarden Porat Cyata Research: LangGrinch Vulnerability in LangChain Published: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ Yesterday LangChain published a critical...

LangAlpha

The harness for agentic trading. Open-source AI agents that research the market, build the thesis, and trade your own brokerage account within the permissions you set. Try LangAlpha ↗ · Get started · Agentic trading · Harness design · Full-stack architecture · Security English · 简体中文 · 日本語 Why...

Nmap-API

Nmap API Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items GE...

CVE-2024-8309

Proof of Concept for Langchain CVE-2024–8309 Vulnerability Overview This setup demonstrates a proof of concept for the prompt injection vulnerability in the GraphCypherQAChain class that allows SQL injection in a Neo4j database. Components: 1. Neo4j Database : Runs Neo4j. 2. Backend FastAPI :...

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start 🐛 Vulnerability Deep Dive 🔬 Technical Root Cause Analysis ⚔️ Attack Chain Methodology 💀 Payload Arsenal 55+ 🎮 Operator's Strategy Guide...

CVE-2024-21513

CVE-2024-21513 PoC for CVE-2024-21513 Original exploit documented by Snyk Security Research Exploit CVE-2024-21513 is a vulnerability in langchain-experimental where unvalidated SQL query results were passed to Python's eval, enabling remote code execution through SQL-based input injection. PoC...

langgrinch-cve-2025-68664-analysis

LangGrinch Vulnerability Analysis: CVE-2025-68664 Overview This repository contains a technical report analyzing CVE-2025-68664, also known as LangGrinch, a serialization injection vulnerability affecting LangChain Core. The report explains the vulnerability background, root cause, exploitation...

CVE-2026-34070

I Found a Path Traversal Bug in LangChain That Could Leak Your Cloud Credentials How a forgotten legacy API in one of AI's most popular frameworks quietly exposed millions of applications to arbitrary file reads. There's a certain feeling you get when a proof-of-concept works on the first try. No...

CVE-2026-119978

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOWBUILTINDEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth...

EUVD-2026-114243

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOWBUILTINDEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth...

CVE-2026-119408

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

EUVD-2026-113792

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

CVE-2026-119408

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

@n8n-plus/n8n-plus (>=2.32.7, <=2.37.9), @n8n/n8n-nodes-langchain (>=2.32.0, <=2.42.3) +2 more potentially affected by CVE-2026-119408 via n8n-nodes-base (>=2.32.0, <=2.42.3)

n8n-nodes-base NPM version =2.32.0, =2.32.7, =2.32.0, =2.32.0, =2.42.5 Source cves: CVE-2026-119408 Source advisory: MEND:CVE-2026-119408...

@n8n/n8n-nodes-langchain (2.43.0), n8n (>=2.43.0, <=2.43.2) potentially affected by CVE-2026-119408 via n8n-nodes-base (2.43.0)

n8n-nodes-base NPM version 2.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.43.0 - n8n =2.43.0, =2.43.2 Source cves: CVE-2026-119408 Source advisory: MEND:CVE-2026-119408...

n8n (>=2.43.0, <=2.43.2) potentially affected by CVE-2026-119408 via @n8n/n8n-nodes-langchain (2.43.0)

@n8n/n8n-nodes-langchain NPM version 2.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/n8n-nodes-langchain and may be impacted: - n8n =2.43.0, =2.43.2 Source cves: CVE-2026-119408 Source advisory: MEND:CVE-2026-119408...

@n8n-plus/n8n-plus (>=2.32.7, <=2.37.9), @ohos-ports/n8n (2.37.7-beta.0) +1 more potentially affected by CVE-2026-119408 via @n8n/n8n-nodes-langchain (>=2.32.0, <=2.42.3)

@n8n/n8n-nodes-langchain NPM version =2.32.0, =2.32.7, =2.32.0, =2.42.5 Source cves: CVE-2026-119408 Source advisory: MEND:CVE-2026-119408...

CVE-2026-119408: n8n-io n8n: n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via…

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...