Exploit for Code Injection in Langchain Langchain-Experimental

CVE-2024-21513 PoC for CVE-2024-21513 Original exploit documen...

CVE-2024-10940

A flaw was found in Langchain Core. This vulnerability allows unauthorized users to read arbitrary files from the host file system by creating ImagePromptTemplate or ChatPromptTemplate with input variables that can access any user-specified path on the server. Mitigation Mitigation for this issue...

GHSA-5CHR-FJJV-38QV langchain-core allows unauthorized users to read arbitrary files from the host file system

A vulnerability in langchain-core versions =0.1.17,=0.2.0,=0.3.0,0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchaincore.prompts.ImagePromptTemplate's and by extension langchaincore.prompts.ChatPromptTemplate's...

aiagentgraph (>=0.0.1, <=0.0.4a1), anoteai (0.11.0) +55 more potentially affected by CVE-2024-10940 via langchain-core (>=0.2.0, <=0.2.41)

langchain-core PYPI version =0.2.0, =0.0.1, =1.0.0b1, =0.1.33, =0.0.5, =1.0.0, =0.1.1, =0.1.3, =0.1.0, =0.1.3, =0.1.3, =0.1.4 and more Source cves: CVE-2024-10940 Source advisory: OSV:GHSA-5CHR-FJJV-38QV...

aiagentgraph (>=0.0.1, <=0.0.4a1), anoteai (0.11.0) +55 more potentially affected by CVE-2024-10940 via langchain-core (>=0.2.0, <=0.2.41)

langchain-core PYPI version =0.2.0, =0.0.1, =1.0.0b1, =0.1.33, =0.0.5, =1.0.0, =0.1.1, =0.1.3, =0.1.0, =0.1.3, =0.1.3, =0.1.4 and more Source cves: CVE-2024-10940 Source advisory: GHSA-5CHR-FJJV-38QV...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +407 more potentially affected by CVE-2024-10940 via langchain-core (>=0.1.18, <=0.1.52)

langchain-core PYPI version =0.1.18, =0.0.8.dev1, =0.0.1, =0.0.2, =0.0.1, =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0 and more Source cves: CVE-2024-10940 Source advisory: OSV:GHSA-5CHR-FJJV-38QV...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +407 more potentially affected by CVE-2024-10940 via langchain-core (>=0.1.18, <=0.1.52)

langchain-core PYPI version =0.1.18, =0.0.8.dev1, =0.0.1, =0.0.2, =0.0.1, =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0 and more Source cves: CVE-2024-10940 Source advisory: GHSA-5CHR-FJJV-38QV...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +22 more potentially affected by CVE-2024-10940 via langchain-core (>=0.3.0, <=0.3.14)

langchain-core PYPI version =0.3.0, =4.8.2, =0.1.6, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.0.4, =0.0.3, =0.0.11 and more Source cves: CVE-2024-10940 Source advisory: OSV:GHSA-5CHR-FJJV-38QV...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +22 more potentially affected by CVE-2024-10940 via langchain-core (>=0.3.0, <=0.3.14)

langchain-core PYPI version =0.3.0, =4.8.2, =0.1.6, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.0.4, =0.0.3, =0.0.11 and more Source cves: CVE-2024-10940 Source advisory: GHSA-5CHR-FJJV-38QV...

langchain-core allows unauthorized users to read arbitrary files from the host file system

A vulnerability in langchain-core versions =0.1.17,=0.2.0,=0.3.0,0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchaincore.prompts.ImagePromptTemplate's and by extension langchaincore.prompts.ChatPromptTemplate's...

aiagentgraph (>=0.0.1, <=0.0.4a1), anoteai (0.11.0) +59 more potentially affected by CVE-2024-10940 via langchain-core (>=0.2.0rc1, <=0.2.41)

langchain-core PYPI version =0.2.0rc1, =0.0.1, =1.0.0b1, =0.1.33, =0.0.5, =1.0.0, =0.1.1, =0.1.3, =0.1.0, =0.1.3, =0.1.3, =0.1.4 and more Source cves: CVE-2024-10940 Source advisory: SNYK:PYTHON-LANGCHAINCORE-9486546...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +435 more potentially affected by CVE-2024-10940 via langchain-core (>=0.0.1, <=0.1.52)

langchain-core PYPI version =0.0.1, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0 and more Source cves: CVE-2024-10940 Source advisory: SNYK:PYTHON-LANGCHAINCORE-9486546...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +25 more potentially affected by CVE-2024-10940 via langchain-core (>=0.3.0.dev4, <=0.3.14)

langchain-core PYPI version =0.3.0.dev4, =4.8.2, =0.1.6, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.0.4, =0.0.3, =0.0.11 and more Source cves: CVE-2024-10940 Source advisory: SNYK:PYTHON-LANGCHAINCORE-9486546...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview langchain-core is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere in the ImagePromptTemplate in image.py, which can be instantiated with input variables...

PYSEC-2025-244

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

PYSEC-2025-244

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

CVE-2024-10940

A vulnerability in langchain-core versions =0.1.17,=0.2.0,=0.3.0,0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchaincore.prompts.ImagePromptTemplate's and by extension langchaincore.prompts.ChatPromptTemplate's...

Improper Handling of Exceptional Conditions

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions via the streamcomplete method of the LangChainLLM class. An attacker can disrupt service availability by providing an input of type...

aiagentgraph (>=0.0.1, <=0.0.4a1), anoteai (0.11.0) +55 more potentially affected by CVE-2024-10940 via langchain-core (>=0.2.0, <=0.2.41)

langchain-core PYPI version =0.2.0, =0.0.1, =1.0.0b1, =0.1.33, =0.0.5, =1.0.0, =0.1.1, =0.1.3, =0.1.0, =0.1.3, =0.1.3, =0.1.4 and more Source cves: CVE-2024-10940 Source advisory: MEND:CVE-2024-10940...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +407 more potentially affected by CVE-2024-10940 via langchain-core (>=0.1.18, <=0.1.52)

langchain-core PYPI version =0.1.18, =0.0.8.dev1, =0.0.1, =0.0.2, =0.0.1, =0.10.5, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0 and more Source cves: CVE-2024-10940 Source advisory: MEND:CVE-2024-10940...