Aller au contenu
en Se connecter
8.3 Élevée

CVE-2025-65106 LangChain is a framework for building agents and LLM-powered applications

Description

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.

Produits et versions touchés

Produit Versions touchées Corrigé en
langchain 1.0 1.0.0 → < 1.0.7 1.0.7
langchain 0.3 premières → < 0.3.80 0.3.80

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de langchain

Les 9 CVE de langchain →
CVE-2026-55443 LangChain is a framework for building agents and LLM-powered applications 5.1 Moyenne CVE-2026-44843 LangChain is a framework for building agents and LLM-powered applications 8.2 Élevée CVE-2026-40087 LangChain is a framework for building agents and LLM-powered applications 5.3 Moyenne CVE-2026-34070 LangChain is a framework for building agents and LLM-powered applications 7.5 Élevée
Suivre cette CVE