Skip to content
fr Sign in
8.3 High

CVE-2025-65106 LangChain is a framework for building agents and LLM-powered applications

Description

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.

Affected products and versions

Product Affected versions Fixed in
langchain 1.0 1.0.0 → < 1.0.7 1.0.7
langchain 0.3 earliest → < 0.3.80 0.3.80

References

Timeline

  1. Published
  2. Last modified

Other CVEs of langchain

The 9 CVEs of langchain →
CVE-2026-55443 LangChain is a framework for building agents and LLM-powered applications 5.1 Medium CVE-2026-44843 LangChain is a framework for building agents and LLM-powered applications 8.2 High CVE-2026-40087 LangChain is a framework for building agents and LLM-powered applications 5.3 Medium CVE-2026-34070 LangChain is a framework for building agents and LLM-powered applications 7.5 High
Track this CVE