PT-2026-44128 · Langroid · Langroid

Ka7Arotto · Published 2026-05-27 · Updated 2026-06-02 · CVE-2026-25879

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.63.0

Description SQLChatAgent executes SQL produced by a Large Language Model (LLM), which can be influenced by prompt injection. When configured with a database role possessing privileges for code execution or filesystem access (such as PostgreSQL pg execute server program, MySQL FILE, or MSSQL xp cmdshell), an attacker can shape the agent's input—including indirectly via data returned to the LLM—to force the execution of dialect-specific primitives like COPY ... FROM PROGRAM. This can lead to remote code execution (RCE) on the database host.

Recommendations Update to version 0.63.0. Ensure the allow dangerous operations variable is set to False to maintain the SELECT-only statement allowlist and dangerous-pattern blocklist.

Exploit

Fix

SQL injection

Code Injection

Weakness Enumeration

CWE-89

CWE-94

Related Identifiers

CVE-2026-25879

GHSA-MXFR-6HCW-J9RQ

Affected Products

Langroid

References · 6

• 🔥 https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-25879 · Security Note
• https://osv.dev/vulnerability/GHSA-mxfr-6hcw-j9rq · Vendor Advisory
• https://github.com/langroid/langroid · Note
• https://twitter.com/CVEnew/status/2061590912648544368 · Twitter Post
• https://twitter.com/TuringCyberObs/status/2061831660950147562 · Twitter Post