PT-2025-52859 · Langchain · Langchain

0Xn3Va + 2 · Published 2025-12-23 · Updated 2026-05-22 · CVE-2025-68664

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.3.81 and 1.2.5

Description: A serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. These functions do not properly escape dictionaries containing 'lc' keys when serializing data. The 'lc' key is used internally by LangChain to identify serialized objects. When user-controlled data includes this key structure, it is incorrectly treated as a legitimate LangChain object during deserialization instead of plain user data. This allows attackers to potentially extract sensitive information, such as environment variables, and potentially execute arbitrary code. The vulnerability is exploitable through prompt injection via LLM responses and can affect various components, including streaming operations and cached data.

Recommendations: Upgrade to LangChain version 0.3.81 or 1.2.5 or later. If upgrading is not immediately possible, restrict deserialization to a predefined allowlist of trusted objects and disable automatic loading of secrets from environment variables. Treat all LLM outputs as untrusted data, especially when serialization or deserialization is involved.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-68664

GHSA-C67J-W6G6-Q2CM

Affected Products

Langchain

References · 110

• 🔥 https://github.com/langchain-ai/langchain/security/advisories/GHSA-c67j-w6g6-q2cm · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68664.json · Exploit
• 🔥 https://exploit-db.com/exploits/52514 · Exploit
• https://github.com/langchain-ai/langchain/pull/34455 · Patch
• https://github.com/langchain-ai/langchain/pull/34458 · Patch
• https://github.com/langchain-ai/langchain/commit/5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8 · Patch
• https://github.com/langchain-ai/langchain/commit/d9ec4c5cc78960abd37da79b0250f5642e6f0ce6 · Patch
• https://osv.dev/vulnerability/CVE-2025-68664 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c67j-w6g6-q2cm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68664 · Security Note
• https://osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2025-68664 · Vendor Advisory
• https://github.com/langchain-ai/langchain · Note
• https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.5 · Note
• https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D0.3.81 · Note
• https://github.com/Josh-blythe/bordair-multimodal · Reddit Post