Arbitrary Code Execution

2023-04-1117:32:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary code execution

python

prompt injection

0.002 Low

EPSS

Percentile

54.6%

JSON

langchain is vulnerable to Arbitrary Code Execution.The vulnerability exists in the _process_llm_result function due to the insecure usage of the Python exec method, which allows an attacker to carry out prompt injection attacks resulting in arbitrary code execution.

CPENameOperatorVersion
langchainle0.0.141
langchainle0.0.141

CPE	Name	Operator	Version
	langchain	le	0.0.141
	langchain	le	0.0.141

References

github.com/hwchase17/langchain/issues/1026

github.com/hwchase17/langchain/issues/814

github.com/hwchase17/langchain/pull/1119

github.com/zachschillaci27/langchain/commit/afb545506893c9d8d0c780912fe87113197d29a6

twitter.com/rharang/status/1641899743608463365/photo/1

0.002 Low

EPSS

Percentile

54.6%

JSON

Related for VERACODE:40111