LangChainGHSA-v8vj-cv27-hjv8
LangChain Experimental vulnerable to arbitrary code execution
Critical9.8CVE-2024-27444 · Published Feb 26, 2024 · updated Jun 29, 2026
langchain_experimental (aka LangChain Experimental) before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the `__import__`, `__subclasses__`, `__builtins__`, `__globals__`, `__getattribute__`, `__bases__`, `__mro__`, or `__base__` attribute in Python code. These are not prohibited by `pal_chain/base.py`.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| langchain-experimental PyPI | < 0.0.52 | 0.0.52 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-749
- Also known as
- CVE-2024-27444, PYSEC-2026-375
More LangChain advisories
All LangChain| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 62024 | Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever Medium4.8Jun 6, 2024 | Medium4.8 | 0.2.9 |
| Apr 162024 | langchain vulnerable to path traversalMedium6.5Apr 16, 2024 | Medium6.5 | 0.0.353 |
| Mar 262024 | LangChain's XMLOutputParser vulnerable to XML Entity ExpansionMedium5.9Mar 26, 2024 | Medium5.9 | 0.1.35 |
| Mar 42024 | LangChain directory traversal vulnerabilityLowMar 4, 2024 | Low | 0.0.339+1 more |
| Mar 12024 | LangChain: server-side request forgeryCritical9.8Mar 1, 2024 | Critical9.8 | No fix yet |
| Feb 262024 | langchain Server-Side Request Forgery vulnerabilityLow3.7Feb 26, 2024 | Low3.7 | 0.1.0 |