{"id":"CVE-2024-27444","aliases":["GHSA-v8vj-cv27-hjv8","PYSEC-2026-375"],"title":"LangChain Experimental vulnerable to arbitrary code execution","summary":"LangChain Experimental vulnerable to arbitrary code execution","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"langchain-experimental","product":"langchain-experimental","ecosystem":"pip","affected":["langchain-experimental < 0.0.52"],"patched":["langchain-experimental 0.0.52"],"published":"2024-02-26","updated":"2026-10-27","sourceUpdated":"2026-10-27T17:00:04.002430035Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-v8vj-cv27-hjv8","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27444"},{"url":"https://github.com/langchain-ai/langchain/commit/de9a6cdf163ed00adaf2e559203ed0a9ca2f1de7"},{"url":"https://github.com/langchain-ai/langchain"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/langchain-experimental/PYSEC-2026-375.yaml"},{"url":"https://pypi.org/project/langchain-experimental"},{"url":"https://github.com/advisories/GHSA-v8vj-cv27-hjv8"}],"tags":["osv","pip","ghsa"],"epss":0.00773,"epssPercentile":0.55501,"cwe":["CWE-749"],"ingestedAt":"2026-10-27T17:33:23.772Z","slug":"CVE-2024-27444","body":"## Overview\n\nlangchain_experimental (aka LangChain Experimental) before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the `__import__`, `__subclasses__`, `__builtins__`, `__globals__`, `__getattribute__`, `__bases__`, `__mro__`, or `__base__` attribute in Python code. These are not prohibited by `pal_chain/base.py`.\n\n## Affected packages\n\n- `langchain-experimental < 0.0.52`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `langchain-experimental 0.0.52`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}