Known Vulnerabilities for LangChain by LangChain AI
Listed below are 10 of the newest known vulnerabilities associated with "LangChain" by "LangChain AI".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-119978 json | Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusi... | Not Provided | 2026-10-30 | 2026-11-02 |
| CVE-2026-119408 json | n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated F... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-114510 json | Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications across multiple gr... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-106119 json | LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce th... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105799 json | LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-con... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-101861 json | Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authen... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-86082 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforce... | Not Provided | 2026-09-08 | 2026-09-14 |
| CVE-2026-75128 json | Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without a... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-55253 json | LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongo... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-51884 json | The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path tra... | Not Provided | 2026-10-01 | 2026-10-05 |