PT-2023-24019 · Langchain · Langchain

Rharang · Published 2023-10-20 · Updated 2026-05-27 · CVE-2023-32786

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Langchain versions 0.0.0 through 0.0.155 Langchain versions prior to 0.0.329

Description The issue allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing Server-Side Request Forgery (SSRF) and potentially injecting content into downstream tasks. This is achieved through prompt injection.

Recommendations For versions 0.0.0 through 0.0.155, update to version 0.0.329 or later. For versions prior to 0.0.329, update to version 0.0.329 or later. As a temporary workaround, consider restricting the ability to inject prompts that force the service to retrieve data from arbitrary URLs until a patch is available.

Fix

SSRF

Special Elements Injection

Weakness Enumeration

CWE-918

CWE-74

Related Identifiers

CVE-2023-32786

GHSA-6H8P-4HX9-W66C

Affected Products

Langchain

References · 11

• https://osv.dev/vulnerability/GHSA-6h8p-4hx9-w66c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32786 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32786 · Vendor Advisory
• https://github.com/langchain-ai/langchain · Note
• https://github.com/langchain-ai/langchain/releases/tag/v0.0.329 · Note
• https://github.com/langchain-ai/langchain/pull/12747 · Note
• https://twitter.com/lyrie_ai/status/2049723410461196797 · Twitter Post
• https://t.me/cibsecurity/72724 · Telegram Post
• https://twitter.com/thesignalnow/status/2059526850523570244 · Twitter Post
• https://t.me/cvenotify/59849 · Telegram Post
• https://gist.github.com/rharang/d265f46fc3161b31ac2e81db44d662e1 · Note