Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Boazwasserman

#25381of 53,633
9.8Total CVSS
Vulnerabilities · 1
PT-2023-26641
9.8
2023-08-15
Langchain · Langchain · CVE-2023-38860
**Name of the Vulnerable Software and Affected Versions** LangChain versions 0.0.231 through 0.0.246 **Description** An issue in LangChain allows a remote attacker to execute arbitrary code via the `prompt` parameter. This enables the attacker to potentially gain control over the system, leading to severe consequences. **Recommendations** For LangChain versions 0.0.231 through 0.0.246, update to version 0.0.247 or later to resolve the issue. As a temporary workaround, consider restricting access to the `prompt` parameter to minimize the risk of exploitation.