CVE-2026-44843

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

CVE-2026-44843 LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

LangChain code-related vulnerabilities

LangChain is an open-source framework developed by LangChain for creating applications powered by large language models LLMs. Versions of LangChain prior to 0.3.85 and 1.3.3 contained code vulnerabilities. These vulnerabilities stemmed from the use of an overly broad object white-list for...

CVE-2026-44843: Deserialization of Untrusted Data

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

autocontrastive-gen (0.2.0), bgnlp (>=0.0.7, <=0.4.1) +9 more potentially affected by CVE-2026-4372 via transformers (4.26.0)

transformers PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autocontrastive-gen 0.2.0 - bgnlp =0.0.7, =2.0.0, =0.10.0, =0.0.3, =0.0.1, =0.1.2, =0.0.4, =1.0.6, =1.0.7 Source cves: CVE-2026-4372...

brave-mcp-langchain (>=0.1.0, <=0.2.0), bughunter-akabarki76 (0.3.24) +7 more potentially affected by CVE-2026-48710 via starlette (0.47.1)

starlette PYPI version 0.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - brave-mcp-langchain =0.1.0, =1.3.0rc1, =0.2.6, =0.3.0 Source cves: CVE-2026-48710 Source advisory: OSV:PYSEC-2026-161...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Server-Side Request Forgery in LangChain [CVE-2026-26013]

Summary IBM Watson Speech Services Cartridge is vulnerable to a Server-Side Request Forgery in LangChain, due to a faulty method that fetches arbitrary imageurl values without validation when computing token counts for vision-enabled models. CVE-2026-26013. LangChain is used in our speech runtime...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in LangChain [CVE-2026-34070]

Summary IBM Watson Speech Services Cartridge is vulnerable to a path traversal in LangChain, due to multiple functions in langchaincore.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection...

PT-2026-45207

Root has patched GHSA-fv5p-p927-qmxr in the rootio-langchain-text-splitters package for Root:PyPI. Multiple fixed versions available...

Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images

Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2026-41425 DESCRIPTION: Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in...

Deserialization of Untrusted Data

Overview langchain-classic is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Deserialization of Untrusted Data when fetching and processing prompt manifests from external sources. An attacker can execute arbitrary code or manipulate...

Deserialization of Untrusted Data

Overview langchain is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Deserialization of Untrusted Data when fetching and processing prompt manifests from external sources. An attacker can execute arbitrary code or manipulate application...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +43 more potentially affected by CVE-2026-45134 via langchain-classic (>=1.0.0, <=1.0.5)

langchain-classic PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.0.597, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.11.dev11 - easy-rag-pdf 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: OSV:GHSA-3644-Q5CJ-C5C7...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +43 more potentially affected by CVE-2026-45134 via langchain-classic (>=1.0.0, <=1.0.5)

langchain-classic PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.0.597, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.11.dev11 - easy-rag-pdf 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: SNYK:PYTHON-LANGCHAINCLASSIC-16658750...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +43 more potentially affected by CVE-2026-45134 via langchain-classic (>=1.0.0, <=1.0.5)

langchain-classic PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.0.597, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.11.dev11 - easy-rag-pdf 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: GHSA-3644-Q5CJ-C5C7...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1055 more potentially affected by CVE-2026-45134 via langchain (>=0.0.27, <=0.3.28)

langchain PYPI version =0.0.27, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =3.2.0, =2.1.7, =2.1.13 - agent-builder 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: GHSA-3644-Q5CJ-C5C7...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1055 more potentially affected by CVE-2026-45134 via langchain (>=0.0.27, <=0.3.28)

langchain PYPI version =0.0.27, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =3.2.0, =2.1.7, =2.1.13 - agent-builder 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: SNYK:PYTHON-LANGCHAIN-16658746...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1055 more potentially affected by CVE-2026-45134 via langchain (>=0.0.27, <=0.3.28)

langchain PYPI version =0.0.27, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =3.2.0, =2.1.7, =2.1.13 - agent-builder 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: OSV:GHSA-3644-Q5CJ-C5C7...

LangChain Core 1.3.2 / 0.3.84 Tracer Deserialization / Credential Disclosure

LangChain Core has a tracer deserialization vulnerability that could allow unauthenticated remote credential exfiltration in affected deployments. Versions 1.3.2 and 0.3.84 are affected...

LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists

LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with allowedobjects="all". This does not enable arbitrary Python object deserialization, but it does allow...