CVE-2026-41481

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

EUVD-2026-25634

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

CVE-2026-41481

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

a2a-client-handler (0.1.0), aa-rag (>=0.1.0, <=0.4.3) +1264 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=0.0.1, <=1.1.1)

langchain-text-splitters PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0, =0.1.0b0, =0.0.1, =4.8.2, =0.0.1a1, =0.1.3, =0.1.0, =0.1.0, =1.0.0rc1, =2.6.1 and more Source cves: CVE-2026-41481 Source advisory: MEND:CVE-2026-41481...

CVE-2026-41481 LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

CVE-2026-41481 LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

langchain-text-splitters code issue vulnerability

langchain-text-splitters is a Python package open-sourced by LangChain. Versions of langchain-text-splitters prior to 1.1.2 had code vulnerabilities. These vulnerabilities stemmed from the use of the splittextfromurl method in HTMLHeaderTextSplitter, which initiated a redirection after verifying...

CVE-2026-41481: Server-Side Request Forgery (SSRF)

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

PT-2026-35087

Name of the Vulnerable Software and Affected Versions langchain-openai versions prior to 1.1.14 Description The url to size helper function, utilized by get num tokens from messages for image token counting, contains a Time-of-Check to Time-of-Use TOCTOU flaw. The function validates URLs for...

LangChain code-related vulnerabilities

LangChain is an open-source framework developed by LangChain for creating applications powered by large language models LLMs. Versions of LangChain prior to 1.1.14 contained code vulnerabilities. These vulnerabilities stemmed from the urltosize helper function in langchain-openai, which, after...

CVE-2026-41488: Server-Side Request Forgery (SSRF)

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's MCP architecture that could pave the way for remote code execution and have a cascading effect on the artificial intelligence AI supply chain. "This flaw enables Arbitrary Command Execution R...

langchain-nebius (>=0.1.0, <=0.1.2), sugardata (>=0.0.4, <=0.0.5) potentially affected by CVE-2026-41488 via langchain-openai (0.3.5)

langchain-openai PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - langchain-nebius =0.1.0, =0.0.4, =0.0.5 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

flotorch-core (>=2.8.1, <=2.10.0), hie-rag (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.13)

langchain-openai PYPI version 0.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - flotorch-core =2.8.1, =0.1.0, =1.2.4, =0.4.1, =0.1.0, =0.2.7 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ...

mindsdb (>=25.3.4.1, <=25.9.3rc1), pyvanguard (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.6)

langchain-openai PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - mindsdb =25.3.4.1, =0.1.0, =0.2.0 - ta-using-llms 0.0.4 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

athina (>=0.3.2, <=1.2.19), converso (0.1.1) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.3)

langchain-openai PYPI version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - athina =0.3.2, =0.6.0, =0.8.0 - rebuff 0.1.1 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

ai-review-assistant (>=0.1.0, <=0.4.0), aita (>=0.1.3, <=0.1.5) +110 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.25)

langchain-openai PYPI version 0.1.25 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-review-assistant =0.1.0, =0.1.3, =0.0.1, =0.1.12, =0.5.0, =0.4.0.dev1, =1.0.4, =0.1.0, =0.0.36, =0.0.5, =0.1.4, =0.1.9 -...

bugbug (0.0.550), okazaki (>=0.0.2, <=0.0.4) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.17)

langchain-openai PYPI version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.550 - okazaki =0.0.2, =0.1.1, =0.1.0, =0.3.3, =0.0.3, =0.7.0 Source cves: CVE-2026-41488 Source advisory:...

agentfoundry (>=1.3.9, <=1.3.10), markitdown-pro (>=1.0.0, <=2.2.0) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.29)

langchain-openai PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentfoundry =1.3.9, =1.0.0, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-41488 Source advisory:...

converso (0.1.0), kgraphplanner (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.20)

langchain-openai PYPI version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - converso 0.1.0 - kgraphplanner =0.0.1, =1.2.15, =0.0.2, =0.0.7, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-41488 Source...