What’s Vulnerable › Vulnerabilities

CVE-2023-32786

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-20 · updated 2026-06-17
• Weakness: CWE-74

Description

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.

Affected products

• langchain-ai/langchain: through 0.0.155

References

• https://gist.github.com/rharang/d265f46fc3161b31ac2e81db44d662e1
• https://gist.github.com/rharang/d265f46fc3161b31ac2e81db44d662e1

Get alerted when CVE-2023-32786 or the next vulnerability affects your stack