Skip to content
LangChainGHSA-h59x-p739-982c

LangChain directory traversal vulnerability

LowCVE-2024-28088 · Published Mar 4, 2024 · updated Dec 3, 2024

GitHub advisory

Affected versions

PackageAffectedFixed in
langchain
PyPI
< 0.0.3390.0.339
langchain-core
PyPI
< 0.1.300.1.30
Details and references

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution.

Severity from
GitHub (reviewed advisory)
Also known as
CVE-2024-28088, PYSEC-2024-43, PYSEC-2024-45

More LangChain advisories

All LangChain
DateAdvisory
Mar 12024A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It
CVE-2024-2057Critical9.8no fix yet
Feb 262024LangChain Experimental vulnerable to arbitrary code execution
CVE-2024-27444Critical9.8fixed in 0.0.52
Feb 262024langchain Server-Side Request Forgery vulnerability
CVE-2024-0243Low3.7fixed in 0.1.0
Mar 262024LangChain's XMLOutputParser vulnerable to XML Entity Expansion
CVE-2024-1455Medium5.9fixed in 0.1.35
Apr 162024langchain vulnerable to path traversal
CVE-2024-3571Medium6.5fixed in 0.0.353
Jun 62024Denial of service in langchain-community
CVE-2024-2965Medium4.2fixed in 0.2.5

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.