PT-2025-19789 · Lxml+1 · Lxml+1
Sch227
·
Published
2025-05-05
·
Updated
2025-08-01
·
CVE-2025-46726
CVSS v3.1
9.4
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Langroid versions prior to 0.53.4
Description
A LLM application leveraging the
XMLToolMessage class may be exposed to untrusted XML input, potentially resulting in Denial of Service (DoS) and/or exposing local files with sensitive information. The XMLToolMessage class uses lxml without safeguards, making it vulnerable to quadratic blowup attacks and allowing the processing of external entity declarations for local files by default.Recommendations
For versions prior to 0.53.4, update to version 0.53.4 to fix the issue. As a temporary workaround, consider disabling the use of the
XMLToolMessage class until the update is applied. Restrict access to the lxml library to minimize the risk of exploitation. Avoid using the XMLToolMessage class with untrusted XML input until the issue is resolved.Exploit
Fix
DoS
XXE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Langroid
Lxml