PT-2025-47809 · Langchain · Langchain

Published 2025-11-20 · Updated 2025-11-21 · CVE-2025-65106

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LangChain versions 0.3.79 and prior LangChain versions 1.0.0 through 1.0.6

Description LangChain is a framework used for building agents and applications powered by Large Language Models (LLMs). A template injection issue exists in the prompt template system, allowing attackers to access Python object internals through template syntax. This affects applications that accept untrusted template strings in ChatPromptTemplate and related prompt template classes. The issue impacts systems utilizing user-supplied templates, potentially leading to unauthorized access or code execution.

Recommendations Update to LangChain version 0.3.80 or later. Update to LangChain version 1.0.7 or later.

Exploit

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2025-65106

GHSA-6QV9-48XG-FC7F

Affected Products

Langchain

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65106.json · Exploit
• https://osv.dev/vulnerability/GHSA-6qv9-48xg-fc7f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65106 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65106 · Vendor Advisory
• https://github.com/langchain-ai/langchain · Note
• https://github.com/langchain-ai/langchain/commit/c4b6ba254e1a49ed91f2e268e6484011c540542a · Note
• https://github.com/langchain-ai/langchain/commit/fa7789d6c21222b85211755d822ef698d3b34e00 · Note
• https://github.com/langchain-ai/langchain/security/advisories/GHSA-6qv9-48xg-fc7f · Note
• https://t.me/CVEtracker/37983 · Telegram Post
• https://twitter.com/CVEnew/status/1991987613746577896 · Twitter Post