Vendor

    LangChain AI

    51 known vulnerabilities in products by LangChain AI, 0 of them actively exploited (CISA KEV).

    Key figures

    51

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    23

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in LangChain AI
    CriticalCVE-2025-68664

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    also in 1 other product

    		9.3
    CriticalCVE-2023-29374

    LangChain: Code Execution

    		9.8
    CriticalCVE-2025-2828

    SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

    also in 1 other product

    		8.4
    HighCVE-2023-46229

    LangChain: Server-Side Request Forgery (SSRF)

    		8.8
    HighCVE-2026-28277

    LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

    also in 2 other products

    		6.8
    CriticalCVE-2023-36281

    LangChain: Code Execution

    		9.8
    CriticalCVE-2024-8309

    SQL Injection in langchain-ai/langchain

    also in 1 other product

    		4.9
    HighCVE-2025-67644

    Langchain-ai Langgraph: SQL Injection

    also in 1 other product

    		7.3
    CriticalCVE-2023-36188

    LangChain: Code Execution

    		9.8
    CriticalCVE-2023-38896

    LangChain: Code Execution

    		9.8
    HighCVE-2026-34070

    LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

    also in 4 other products

    		7.5
    CriticalCVE-2023-34540

    LangChain: Remote Code Execution

    		9.8
    HighCVE-2024-21513

    Langchain-experimental: Code Injection

    		8.5
    CriticalCVE-2023-39631

    LangChain: Code Execution

    		9.8
    CriticalCVE-2024-46946

    LangChain AI Langchain-experimental: Code Execution

    		9.8
    CriticalCVE-2023-39659

    LangChain: Code Execution

    		9.8
    CriticalCVE-2023-38860

    LangChain: Code Execution

    		9.8
    HighCVE-2024-28088

    LangChain: Path Traversal

    		8.1
    CriticalCVE-2023-36095

    LangChain: Code Execution

    		9.8
    HighCVE-2024-3571

    Path Traversal in langchain-ai/langchain

    also in 1 other product

    		6.5
    CriticalCVE-2023-36258

    LangChain: Code Execution

    		9.8
    CriticalCVE-2023-44467

    Langchain Experimental: Code Execution

    		9.8
    CriticalCVE-2023-34541

    LangChain: Code Execution

    		9.8
    CriticalCVE-2025-68665

    LangChain serialization injection vulnerability enables secret extraction

    also in 1 other product

    		8.6
    HighCVE-2023-36189

    LangChain: SQL Injection

    		7.5

    All vulnerabilities in search

    Products

    Products by LangChain AI
    LangChain280
    Langchain Core50
    Langchain-experimental50
    Langchain Community30