PT-2026-35087 · Langchain Ai · Langchain-Openai

Published 2026-04-24 · Updated 2026-04-24 · CVE-2026-41488

Mitre

CVSS v3.1

3.1

Low

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's url to size() helper (used by get num tokens from messages for image token counting) validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled hostname could resolve to a public IP during validation and then to a private/localhost IP during the actual fetch.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-41488

Affected Products

Langchain-Openai

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-41488 · Security Note
• https://github.com/langchain-ai/langchain/security/advisories/GHSA-r7w7-9xr2-qq2r · Note