PT-2026-6292 · Langroid · Langroid

Pchalasan · Published 2025-05-20 · Updated 2026-02-04 · CVE-2026-25481

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.59.32

Description Langroid is a framework used for building applications powered by large-language-models. A weakness exists in the TableChatAgent component where the Web Application Firewall (WAF) can be bypassed. This bypass is due to a flaw in the literal ok() function, which incorrectly returns False instead of raising an error when encountering invalid input. This, combined with unrestricted access to dangerous dunder attributes such as init, globals, and builtins, allows attackers to chain whitelisted DataFrame methods to access the eval builtin and ultimately execute arbitrary code. The issue allows for Remote Code Execution (RCE).

Recommendations Update to version 0.59.32 or later. Review deployments for potential exposure.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-25481

GHSA-JQQ5-WC57-F8HJ

GHSA-X34R-63HX-W57F

Affected Products

Langroid

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25481.json · Exploit
• https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj · Vendor Advisory
• https://github.com/langroid/langroid/commit/30abbc1a854dee22fbd2f8b2f575dfdabdb603ea · Patch
• https://github.com/langroid/langroid/security/advisories/GHSA-x34r-63hx-w57f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46724 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25481 · Security Note
• https://osv.dev/vulnerability/GHSA-jqq5-wc57-f8hj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25481 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x34r-63hx-w57f · Vendor Advisory
• https://github.com/langroid/langroid · Note
• https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6 · Note
• https://twitter.com/pulsepatchio/status/2018698946395160799 · Twitter Post
• https://t.me/CVEtracker/43753 · Telegram Post
• https://twitter.com/0dayPublishing/status/2019145580182688234 · Twitter Post
• https://twitter.com/CVEnew/status/2019182778345222152 · Twitter Post