CVE-2026-41488

A flaw was found in langchain-openai. A remote attacker could exploit a Time-of-Check to Time-of-Use TOCTOU vulnerability, also known as a DNS rebinding vulnerability. This occurs because the urltosize helper, used for image token counting, validates URLs for Server-Side Request Forgery SSRF...

PYSEC-2026-76

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...

ai-shell-agent (>=0.1.0, <=0.2.2), toolmate-lite (>=0.6.51, <=0.6.52) potentially affected by CVE-2026-41488 via langchain-openai (0.3.2)

langchain-openai PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-shell-agent =0.1.0, =0.6.51, =0.6.52 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

chemgraphagent (>=0.2.0, <=0.2.1), cogniweave (>=0.1.1, <=0.1.10) +12 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.27)

langchain-openai PYPI version 0.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - chemgraphagent =0.2.0, =0.1.1, =1.5.0, =0.3.0, =0.3.0, =0.2.0, =0.0.1.dev0, =3.3.0, =0.2.1, =0.3.2 Source cves: CVE-2026-41488...

core4ai (>=1.1.6, <=1.3.1), kno-sdk (>=0.1.0, <=1.4.10) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.14)

langchain-openai PYPI version 0.3.14 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - core4ai =1.1.6, =0.1.0, =0.2.0, =1.0.1 - ragbuilder 0.1.6 - spart-prompt 1.0.0 Source cves: CVE-2026-41488 Source advisory:...

edubotics-core (>=0.1.3, <=0.1.7), langchain-pangu (>=0.1.0, <=0.2.3) +6 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.23)

langchain-openai PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - edubotics-core =0.1.3, =0.1.0, =0.2.0rc1, =0.1.6, =1.0.1, =0.1.29, =0.1.49 Source cves: CVE-2026-41488 Source advisory:...

document-qa-engine (>=0.5.1, <=0.6.0), kapso (>=0.1.0, <=0.1.5) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.18)

langchain-openai PYPI version 0.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - document-qa-engine =0.5.1, =0.1.0, =0.1.1, =1.0.0, =1.0.1, =1.0.6 - veee 0.0.3 Source cves: CVE-2026-41488 Source advisory:...

agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +159 more potentially affected by CVE-2026-41488 via langchain-openai (>=1.0.0a4, <=1.1.12)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.1.0, =0.1.2, =0.3.2, =1.4.0a20260123, =1.5.0a20260130 and more Source cves: CVE-2026-41488 Source advisory:...

dziner (0.1.0) potentially affected by CVE-2026-41488 via langchain-openai (0.1.4)

langchain-openai PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - dziner 0.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

ambientagi (>=0.1.1, <=0.2.12), browser-use (>=0.1.38, <=0.1.40) +15 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.1)

langchain-openai PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ambientagi =0.1.1, =0.1.38, =0.1.3, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.1.0, =1.1.40, =0.13.0, =0.14.1 and more...

agentlite-llm (0.1.12), codeqai (>=0.0.11, <=0.0.19) +17 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.5)

langchain-openai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentlite-llm 0.1.12 - codeqai =0.0.11, =0.0.1rc1, =0.11.1, =0.2.0, =0.0.3, =0.0.2, =0.3.0, =0.0.4, =0.0.5 - py-chronicler 0.1.0...

platform-gen-ai (>=0.1.0, <=0.1.1), ragstack-ai-langchain (>=1.0.0, <=1.0.7) potentially affected by CVE-2026-41488 via langchain-openai (0.1.3)

langchain-openai PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - platform-gen-ai =0.1.0, =1.0.0, =1.0.7 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

aiagentgraph (>=0.0.1, <=0.0.4a1), aicat-annotator (0.0.1) +41 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.7)

langchain-openai PYPI version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aiagentgraph =0.0.1, =0.8.29, =0.1.0, =1.0.0, =0.0.5, =0.5.0, =0.5.0, =0.5.0, =0.1.1, =2.0.0, =2.0.5 and more Source cves:...

bugbug (0.0.550), okazaki (>=0.0.2, <=0.0.4) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.17)

langchain-openai PYPI version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.550 - okazaki =0.0.2, =0.1.1, =0.1.0, =0.3.3, =0.0.3, =0.7.0 Source cves: CVE-2026-41488 Source advisory:...

browser-use (>=0.2.6, <=0.3.2), langchain-search-django (>=0.1.0, <=0.7.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.21)

langchain-openai PYPI version 0.3.21 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - browser-use =0.2.6, =0.1.0, =0.7.0 - re-browser-use 0.3.2 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

carton-mcp (>=0.1.80, <=0.1.83), heaven-framework (>=0.1.24, <=0.1.36) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.22)

langchain-openai PYPI version 0.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - carton-mcp =0.1.80, =0.1.24, =0.1.0, =0.0.4, =0.0.6 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

diagram-to-iac (>=1.0.4, <=1.0.9), next-gen-ui-langgraph (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.25)

langchain-openai PYPI version 0.3.25 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - diagram-to-iac =1.0.4, =0.2.0, =0.4.0 - next-gen-ui-testing 0.4.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-7...

diagram-to-iac (>=1.0.10, <=1.4.0) potentially affected by CVE-2026-41488 via langchain-openai (0.3.26)

langchain-openai PYPI version 0.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - diagram-to-iac =1.0.10, =1.4.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +9 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.28)

langchain-openai PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =1.0.0.dev0, =0.2.10, =1.1.0, =0.1.0, =0.1.4, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-41488...

joe2025-uv-project (>=0.1.0, <=0.3.0), meez (0.2.22) potentially affected by CVE-2026-41488 via langchain-openai (0.3.30)

langchain-openai PYPI version 0.3.30 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - joe2025-uv-project =0.1.0, =0.3.0 - meez 0.2.22 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...