{"id":"CVE-2026-41481","title":"langchain-text-splitters: LangChain: Information Disclosure via Server-Side Request Forgery (SSRF) Redirect Bypass (CVE-2026-41481)","summary":"A flaw was found in LangChain and langchain-text-splitters. This vulnerability, a Server-Side Request Forgery (SSRF) bypass, allows a remote attacker to redirect a seemingly safe URL to internal network resources. By exploiting unvalidated…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvssSource":"vendor","cwe":"CWE-918","vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","affected":["migration_toolkit_for_applications 8","openshift_lightspeed","ansible_automation_platform 2","openshift_ai_rhoai"],"patched":["langchain-text-splitters 1.1.2"],"published":"2026-04-24","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:00:28+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41481.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41481.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-41481"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461733"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41481"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41481"},{"url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-fv5p-p927-qmxr"},{"url":"https://github.com/langchain-ai/langchain"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/langchain-text-splitters/PYSEC-2026-77.yaml"}],"tags":["csaf","vex","red-hat","osv","pip"],"epss":0.0026,"epssPercentile":0.17664,"aliases":["GHSA-fv5p-p927-qmxr","PYSEC-2026-77"],"ecosystem":"pip","ingestedAt":"2026-09-12T03:13:01.693Z","slug":"CVE-2026-41481","body":"## Overview\n\nA flaw was found in LangChain and langchain-text-splitters. This vulnerability, a Server-Side Request Forgery (SSRF) bypass, allows a remote attacker to redirect a seemingly safe URL to internal network resources. By exploiting unvalidated redirects, an attacker could access sensitive data from internal, localhost, or cloud metadata endpoints. This could result in information disclosure or data exfiltration if the application processes and exposes the content from these redirected requests.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI) · no fix planned: Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI) · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41481.json)\n\n**langchain-text-splitters: LangChain: Information Disclosure via Server-Side Request Forgery (SSRF) Redirect Bypass** — rated Important by Red Hat. Released 2026-04-24, updated 2026-10-15.\n\nAffected:\n\n- Migration Toolkit for Applications 8\n- OpenShift Lightspeed\n- Red Hat Ansible Automation Platform 2\n- Red Hat OpenShift AI (RHOAI)\n\nNo fix planned:\n\n- Migration Toolkit for Applications 8\n- OpenShift Lightspeed\n- Red Hat Ansible Automation Platform 2\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nFix deferred\n\nWorkarounds / mitigations:\n\n- To mitigate this issue, Red Hat customers should ensure that applications utilizing LangChain's HTMLHeaderTextSplitter.split_text_from_url() function do not process untrusted or unvalidated URLs. Implement strict input validation for all URL inputs to prevent redirection to internal network resources. If an application exposes the content of processed Document objects to external requesters, consider reconfiguring the application to restrict such exposure.\n\n## Package advisory (CVE-2026-41481)\n\nAffected packages:\n\n- `langchain-text-splitters < 1.1.2`\n\nPatched in:\n\n- `langchain-text-splitters 1.1.2`\n\nSource: https://osv.dev/vulnerability/GHSA-fv5p-p927-qmxr","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}