Known Vulnerabilities for Langchain by Langchain-ai
Listed below are 10 of the newest known vulnerabilities associated with "Langchain" by "Langchain-ai".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-101861 json | Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authen... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-86082 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforce... | Not Provided | 2026-09-08 | 2026-09-14 |
| CVE-2026-55253 json | LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongo... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-51884 json | The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path tra... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-51883 json | The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal.... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-51882 json | The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attack... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-48121 json | @langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage.... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-41481 json | LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHead... | Not Provided | 2026-04-24 | 2026-07-15 |
| CVE-2026-34070 json | LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in lan... | Not Provided | 2026-03-31 | 2026-08-25 |
| CVE-2026-14742 json | A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the fil... | Not Provided | 2026-07-05 | 2026-07-06 |