CVE-2026-7846: Time-of-check Time-of-use (TOCTOU) Race Condition

A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to...

CVE-2026-7847: Use of Insufficiently Random Values

A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function getfileid of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently rando...

📄 LangChain Core Insecure Deserialization

LangChain Core versions prior to 1.2.5 and 0.3.81 suffer from a deserialization vulnerability that allows for server-side template injection that can lead to remote code execution. Exploit Title: LangChain Core - SSTI/RCE Date: 2025-12-29 Exploit Author: Mohammed Idrees Banyamer Author Country:...

LangChain-Chatchat competition condition issue vulnerability

LangChain-Chatchat is a chatbot software developed based on the LangChain framework, open-sourced by Chatchat-Space. Versions of Langchain-Chatchat 0.3.1.3 and earlier contained a race condition vulnerability. This vulnerability stemmed from the operation of the files function in the...

LangChain-Chatchat encryption vulnerabilities

LangChain-Chatchat is a chatbot software developed based on the LangChain framework, open-sourced by Chatchat-Space. Versions of Langchain-Chatchat 0.3.1.3 and earlier had encryption-related vulnerabilities. These vulnerabilities stemmed from an issue in the Vision Chat Paste Image Handler...

LangChain-Chatchat Authorization Issue Vulnerability

LangChain-Chatchat is a chatbot software developed based on the LangChain framework, open-sourced by Chatchat-Space. Versions of Langchain-Chatchat 0.3.1.3 and earlier had an authorization vulnerability. This vulnerability stems from a lack of authentication in the functions...

LangChain-Chatchat encryption vulnerabilities

LangChain-Chatchat is a chatbot software developed based on the LangChain framework, open-sourced by Chatchat-Space. Versions of LangChain-Chatchat 0.3.1.3 and earlier had an encryption vulnerability. This vulnerability stems from a function in the Uploaded File Handler component, specifically th...

CVE-2026-7844: Missing Authentication for Critical Function

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/listfiles/retrievefile/retrievefilecontent/deletefile of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Compatible File Service...

LangChain Core 1.2.4 - SSTI/RCE

Exploit Title: LangChain Core - SSTI/RCE Date: 2025-12-29 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Contact: @banyamersecurity Instagram GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.langchain.com/ Software Link: https://pypi.org/project/langchain-core/...

CVE-2026-41481

A flaw was found in LangChain and langchain-text-splitters. This vulnerability, a Server-Side Request Forgery SSRF bypass, allows a remote attacker to redirect a seemingly safe URL to internal network resources. By exploiting unvalidated redirects, an attacker could access sensitive data from...

CVE-2026-41488

A flaw was found in langchain-openai. A remote attacker could exploit a Time-of-Check to Time-of-Use TOCTOU vulnerability, also known as a DNS rebinding vulnerability. This occurs because the urltosize helper, used for image token counting, validates URLs for Server-Side Request Forgery SSRF...

PYSEC-2026-77

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

mindsdb (>=25.3.4.1, <=25.9.3rc1), pyvanguard (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.6)

langchain-openai PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - mindsdb =25.3.4.1, =0.1.0, =0.2.0 - ta-using-llms 0.0.4 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

brickllm (>=1.0.0, <=1.3.0), bugbug (>=0.0.557, <=0.0.560) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.0)

langchain-openai PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - brickllm =1.0.0, =0.0.557, =0.1.0, =0.0.4, =0.3.49, =0.4.14 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

CVE-2026-41481

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

CVE-2026-41488

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...

admin-api-lib (>=3.2.0, <=3.4.0), ai-code-review-cli (>=2.3.0, <=2.7.3) +18 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.34)

langchain-openai PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - admin-api-lib =3.2.0, =2.3.0, =1.1.0b4, =2.0.0.dev6, =1.1.0b3, =1.1.0b1, =0.2.0, =0.0.20, =1.0.0, =0.0.1, =2.1.0, =0.1.0a3,...

aa-rag (>=0.1.0, <=0.4.1), aiagents4pharma (>=1.8.2, <=1.22.3) +10 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.5)

langchain-text-splitters PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - aa-rag =0.1.0, =1.8.2, =1.0.0, =0.0.3, =0.0.2, =25.7.1.0, =0.3.0, =0.7.0, =0.1.1, =0.6.51, =0.0.30, =0.0.33 Sour...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

academic-metrics (>=0.1.0b0, <=1.0.99), aiagents4pharma (>=1.0.0, <=1.6.0) +19 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.2)

langchain-text-splitters PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - academic-metrics =0.1.0b0, =1.0.0, =0.1.8, =0.1.2, =0.1.1, =0.1.0, =0.3.1, =0.1.0, =25.3.4.1, =2.11.0, =2.14.1 a...