Exploit for Code Injection in Langchain

CVE-2023-36281 PoC of CVE-2023-36281 I referred to this PoC...

GHSA-7GFQ-F96F-G85J langchain vulnerable to arbitrary code execution

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter. This is related to subclasses or a template...

langchain vulnerable to arbitrary code execution

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter. This is related to subclasses or a template...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +267 more potentially affected by CVE-2023-36281 via langchain (>=0.0.27, <=0.0.311)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 - athina 0.1.0 and more Source cves: CVE-2023-36281 Source advisory: OSV:GHSA-7GFQ-F96F-G85J...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +267 more potentially affected by CVE-2023-36281 via langchain (>=0.0.27, <=0.0.311)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 - athina 0.1.0 and more Source cves: CVE-2023-36281 Source advisory: GHSA-7GFQ-F96F-G85J...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

Design/Logic Flaw

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

PYSEC-2023-151

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +87 more potentially affected by CVE-2023-36281 via langchain (>=0.0.27, <=0.0.168)

langchain PYPI version =0.0.27, =0.1.7, =0.1.5, =0.0.1, =0.0.1, =0.2.0, =0.15.5, =0.1.1, =0.1.1, =0.0.0, =0.0.1, =0.1.0, =0.2.1, =0.1.0, =0.1.3 and more Source cves: CVE-2023-36281 Source advisory: OSV:PYSEC-2023-151...

PYSEC-2023-151

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter...

LangChain code injection vulnerability

LangChain builds applications using LLM through composability. A code injection vulnerability exists in LangChain version v.0.0.171 that could allow a remote attacker to execute arbitrary code via a json file and the loadprompt parameter...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

PT-2023-25510 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.171 Description: An issue in langchain allows a remote attacker to execute arbitrary code via a JSON file to the load prompt parameter. This is related to subclasses or a template. Recommendations: For langchain version...

CVE-2023-36281: Improper Control of Generation of Code

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +267 more potentially affected by CVE-2023-36281 via langchain (>=0.0.27, <=0.0.311)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 - athina 0.1.0 and more Source cves: CVE-2023-36281 Source advisory: MEND:CVE-2023-36281...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

CVE-2023-36281

Summary: CVE-2023-36281 affects LangChain v0.0.171, enabling remote code execution via a JSON file passed to the load_prompt pathway. The issue is described as related to subclasses or a template, with a high-severity CVSS 3.1 score (9.8) across sources (NVD/Red Hat/OSV/GHSA). What’s affected: La...