VendorsLangChainlangchain_coreall versions
Vulnerabilities

LangChain Core

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2025-68664
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Published 2025-12-23 · Analyzed
9.31 PoCEPSS 0.429
CVE-2026-34070
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
Published 2026-03-31 · Modified
7.5EPSS 0.012
CVE-2026-40087
LangChain has incomplete f-string validation in prompt templates
Published 2026-04-09 · Analyzed
5.3EPSS 0.005
CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
Published 2026-02-10 · Analyzed
3.7EPSS 0.004