What’s Vulnerable › Products

langchain-ai langchain vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your langchain-ai langchain version is affected

Latest langchain-ai langchain vulnerabilities

• CVE-2026-40087 — LangChain has incomplete f-string validation in prompt templates (CVSS 5.3)
• CVE-2026-34070 — LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions (CVSS 7.5)
• CVE-2026-26013 — LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages (CVSS 3.7)
• CVE-2025-68664 — LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs (CVSS 8.2)
• CVE-2025-65106 — LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates (CVSS 8.3)