Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2026/03/31 2:01 a.m.8 views

CVE-2026-34070 LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchaincore.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an...

7.5CVSS6.1AI score0.01382EPSS
SaveExploits2References3
Rows per page
Query Builder