PT-2026-28599 · Unknown · Langchain-Core

Jiayuqi7813 + 3 · Published 2026-03-27 · Updated 2026-05-19 · CVE-2026-34070

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LangChain-core versions prior to 1.2.22

Description LangChain is a framework used for building applications powered by language models. Multiple functions within langchain core.prompts.loading do not properly validate file paths when reading configuration dictionaries, leading to potential directory traversal or absolute path injection issues. Specifically, the functions load prompt() and load prompt from config() are susceptible to this issue when processing user-influenced prompt configurations. An attacker could exploit this to read arbitrary files on the host filesystem, with access limited by file extension checks (.txt for templates, .json/.yaml for examples). The vulnerability affects the load template(), load examples(), and load few shot prompt() functions. The issue allows access to sensitive data such as cloud-mounted secrets, credentials, and configuration files. The vulnerable code paths involve loading templates, examples, and few-shot prompts based on configuration keys.

Recommendations Update langchain-core to version 1.2.22 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-34070

ECHO-34C7-CA18-1A8C

GHSA-QH6H-P6C9-FF54

Affected Products

Langchain-Core

References · 22

• 🔥 https://github.com/langchain-ai/langchain/security/advisories/GHSA-qh6h-p6c9-ff54 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34070.json · Exploit
• https://github.com/langchain-ai/langchain/commit/27add913474e01e33bededf4096151130ba0d47c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-34070 · Security Note
• https://osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2026-34070 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qh6h-p6c9-ff54 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-34070 · Vendor Advisory
• https://github.com/langchain-ai/langchain · Note
• https://github.com/langchain-ai/langchain/releases/tag/langchain-core==1.2.22 · Note
• https://twitter.com/NYsquaredAI/status/2040534029955719592 · Twitter Post
• https://twitter.com/CVEnew/status/2038916035932528640 · Twitter Post
• https://twitter.com/theagentcop/status/2041163240923595163 · Twitter Post
• https://twitter.com/cyberbivash/status/2038836864501571825 · Twitter Post
• https://twitter.com/bigmacd16684/status/2038660185644806422 · Twitter Post
• https://reddit.com/r/cybermaterial/comments/1s52h86/langchain_langgraph_flaws_expose_data · Reddit Post