LangChainGHSA-p2qj-r53j-h3xj
LangChain Experimental Eval Injection vulnerability
Critical9.8CVE-2024-46946 · Published Sep 19, 2024 · updated Jun 29, 2026
langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| langchain-experimental PyPI | >= 0.1.17, <= 0.3.0 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-95
- Also known as
- CVE-2024-46946, PYSEC-2026-374
More LangChain advisories
All LangChain| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 292024 | @langchain/community SQL Injection vulnerability Low4.9Oct 29, 2024 | Low4.9 | 0.3.3 |
| Oct 292024 | Langchain Path Traversal vulnerabilityMedium6.5Oct 29, 2024 | Medium6.5 | 0.2.19 |
| Oct 292024 | Langchain SQL Injection vulnerabilityLow4.9Oct 29, 2024 | Low4.9 | 0.2.0+1 more |
| Sep 172024 | LangChain pickle deserialization of untrusted dataHigh5.2Sep 17, 2024 | High5.2 | 0.2.4 |
| Jul 152024 | langchain-experimental vulnerable to Arbitrary Code ExecutionCritical8.5Jul 15, 2024 | Critical8.5 | 0.0.21 |
| Jun 162024 | langchain_experimental Code Execution via Python REPL accessHigh7.8Jun 16, 2024 | High7.8 | 0.0.61 |