Langchain · Langchain · CVE-2023-29374
**Name of the Vulnerable Software and Affected Versions**
LangChain versions 0.0.0 through 0.0.131
**Description**
The issue allows prompt injection attacks that can execute arbitrary code via the Python `exec()` method. This is specifically related to the `LLMMathChain` chain in LangChain.
**Recommendations**
For versions 0.0.0 through 0.0.131, consider disabling the `LLMMathChain` chain as a temporary workaround until a patch is available. Restrict access to the `exec()` method to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.