PYSEC-2023-109

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

PT-2023-25472 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.64 Description: The issue allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. This enables the attacker to run malicious code, potentially leading to system compromise...

LangChain 注入漏洞

LangChain is an application built using LLM through composability. A security vulnerability exists in LangChain version v.0.0.64, which stems from a vulnerability that allows an attacker to execute arbitrary code via the PALChain parameter in the Python exec method...