PT-2025-35896 · Langchain Ai · Langchain

Published 2025-09-04 · Updated 2025-09-04 · CVE-2025-6984

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions langchain-ai/langchain version 0.3.63

Description The EverNoteLoader component is susceptible to XML External Entity (XXE) attacks due to insecure XML parsing. This issue stems from the use of etree.iterparse() without disabling external entity references, potentially leading to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, such as /etc/passwd, potentially exposing sensitive data.

Recommendations Update langchain-ai/langchain to a version where this issue has been addressed. As a temporary workaround, consider disabling the use of the EverNoteLoader component until a patch is available.

Fix

Information Disclosure

XXE

Weakness Enumeration

CWE-200

CWE-611

Related Identifiers

CVE-2025-6984

GHSA-PC6W-59FV-RH23

Affected Products

Langchain

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-6984 · Security Note
• https://osv.dev/vulnerability/GHSA-pc6w-59fv-rh23 · Vendor Advisory
• https://github.com/langchain-ai/langchain/blob/d79b5813a0b3b243c612b77013768995e46c4337/libs/langchain/langchain/document_loaders/evernote.py#L1-L23 · Note
• https://github.com/langchain-ai/langchain-community/commit/e842452108089524e22c3a2ced851c021884556f · Note
• https://github.com/langchain-ai/langchain-community · Note
• https://twitter.com/CVEnew/status/1963526565633176053 · Twitter Post
• https://huntr.com/bounties/a6b521cf-258c-41c0-9edb-d8ef976abb2a · Note