PT-2026-55945 · Langchain · Langsmith Client Sdks

Ryu7Zz · Published 2026-07-06 · Updated 2026-07-06 · CVE-2026-59152

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LangSmith Client SDKs versions prior to 0.8.18

Description An issue exists in the TracingMiddleware where an attacker can send an HTTP request to a server to force the reading of an arbitrary file from the local filesystem. The contents of the file are then uploaded to LangSmith as a trace attachment. Depending on the deployment of the distributed trace system, triggering this read may not require authentication. However, retrieving the uploaded content requires read access to the LangSmith workspace. This allows a user with low-privilege workspace access to read files from any server running the middleware, crossing the intended trust boundary.

Recommendations Update LangSmith Client SDKs to version 0.8.18.

Fix

Type Confusion

Path traversal

Origin Validation Error

Weakness Enumeration

CWE-843

CWE-22

CWE-346

Related Identifiers

CVE-2026-59152

Affected Products

Langsmith Client Sdks

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-59152 · Security Note
• https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-f4xh-w4cj-qxq8 · Note
• https://twitter.com/CVEnew/status/2074180693018759437 · Twitter Post
• https://twitter.com/infoflowcloud/status/2074182015914586213 · Twitter Post