LangChainGHSA-f2jm-rw3h-6phg
LangChain pickle deserialization of untrusted data
High5.2CVE-2024-5998 · Published Sep 17, 2024 · updated Jul 13, 2026
A vulnerability in the `FAISS.deserialize_from_bytes` function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the `os.system` function. The issue affects versions prior to 0.2.4.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| langchain-community PyPI | < 0.2.4 | 0.2.4 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-502
- Also known as
- CVE-2024-5998, PYSEC-2024-323, PYSEC-2026-1514
More LangChain advisories
All LangChain| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 292024 | @langchain/community SQL Injection vulnerability Low4.9Oct 29, 2024 | Low4.9 | 0.3.3 |
| Oct 292024 | Langchain Path Traversal vulnerabilityMedium6.5Oct 29, 2024 | Medium6.5 | 0.2.19 |
| Oct 292024 | Langchain SQL Injection vulnerabilityLow4.9Oct 29, 2024 | Low4.9 | 0.2.0+1 more |
| Sep 192024 | LangChain Experimental Eval Injection vulnerabilityCritical9.8Sep 19, 2024 | Critical9.8 | No fix yet |
| Jul 152024 | langchain-experimental vulnerable to Arbitrary Code ExecutionCritical8.5Jul 15, 2024 | Critical8.5 | 0.0.21 |
| Jun 162024 | langchain_experimental Code Execution via Python REPL accessHigh7.8Jun 16, 2024 | High7.8 | 0.0.61 |