PT-2025-12081 · Unknown · Langchain-Core

Published 2025-03-20 · Updated 2025-03-22 · CVE-2024-10940

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions langchain-core versions 0.1.17 through 0.1.52 langchain-core versions 0.2.0 through 0.2.42 langchain-core versions 0.3.0 through 0.3.14

Description A vulnerability allows unauthorized users to read arbitrary files from the host file system. This issue arises from the ability to create langchain core.prompts.ImagePromptTemplate and langchain core.prompts.ChatPromptTemplate with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, it can lead to the exposure of sensitive information.

Recommendations For versions 0.1.17 through 0.1.52, consider restricting access to langchain core.prompts.ImagePromptTemplate and langchain core.prompts.ChatPromptTemplate to prevent unauthorized file reading. For versions 0.2.0 through 0.2.42, consider restricting access to langchain core.prompts.ImagePromptTemplate and langchain core.prompts.ChatPromptTemplate to prevent unauthorized file reading. For versions 0.3.0 through 0.3.14, consider restricting access to langchain core.prompts.ImagePromptTemplate and langchain core.prompts.ChatPromptTemplate to prevent unauthorized file reading. As a temporary workaround, consider disabling the creation of langchain core.prompts.ImagePromptTemplate and langchain core.prompts.ChatPromptTemplate with input variables until a patch is available.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-10940

GHSA-5CHR-FJJV-38QV

Affected Products

Langchain-Core

References · 9

• https://osv.dev/vulnerability/GHSA-5chr-fjjv-38qv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-10940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10940 · Security Note
• https://github.com/langchain-ai/langchain · Note
• https://github.com/langchain-ai/langchain/commit/c1e742347f9701aadba8920e4d1f79a636e50b68 · Note
• https://github.com/langchain-ai/langchain/commit/7d481f10102f43559cc57bcad7eba291067939ee · Note
• https://github.com/langchain-ai/langchain/commit/e711034713259ae448981bc0fd1d7a5671499c31 · Note
• https://huntr.com/bounties/be1ee1cb-2147-4ff4-a57b-b6045271cf27 · Note
• https://twitter.com/CVEnew/status/1903336849789087954 · Twitter Post