Langchain · Langchain · CVE-2023-38860
**Name of the Vulnerable Software and Affected Versions**
LangChain versions 0.0.231 through 0.0.246
**Description**
An issue in LangChain allows a remote attacker to execute arbitrary code via the `prompt` parameter. This enables the attacker to potentially gain control over the system, leading to severe consequences.
**Recommendations**
For LangChain versions 0.0.231 through 0.0.246, update to version 0.0.247 or later to resolve the issue.
As a temporary workaround, consider restricting access to the `prompt` parameter to minimize the risk of exploitation.