CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

Exploit for Code Injection in Langchain

CVE-2023-36281 PoC of CVE-2023-36281 I referred to this PoC...

CVE-2023-36281

Summary: CVE-2023-36281 affects LangChain v0.0.171, enabling remote code execution via a JSON file passed to the load_prompt pathway. The issue is described as related to subclasses or a template, with a high-severity CVSS 3.1 score (9.8) across sources (NVD/Red Hat/OSV/GHSA). What’s affected: La...