Product by LangChain AI

    Langchain Core

    5 known vulnerabilities in Langchain Core (LangChain AI), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Langchain Core (LangChain AI)
    CriticalCVE-2025-68664

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    also in 1 other product

    		9.3
    HighCVE-2026-34070

    LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

    also in 4 other products

    		7.5
    CriticalCVE-2025-68665

    LangChain serialization injection vulnerability enables secret extraction

    also in 1 other product

    		8.6
    MediumCVE-2026-40087

    LangChain has incomplete f-string validation in prompt templates

    also in 4 other products

    		5.3
    LowCVE-2026-26013

    LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

    also in 1 other product

    		3.7

    All products by LangChain AI