CVE-2023-32785Critical· 9.8▾ MidnightLangchain SQL Injection vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.
langchain < 0.0.247Upgrade to a patched release:
langchain 0.0.247Connected by shared product, vendor, weakness, or advisory.
CVE-2024-3571Medium· 6.5langchain vulnerable to path traversal
CVE-2024-0243Low· 3.7langchain Server-Side Request Forgery vulnerability
CVE-2026-55443Medium· 5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
CVE-2023-32786High· 7.5Langchain Server-Side Request Forgery vulnerability
CVE-2023-36188Critical· 9.8langchain vulnerable to arbitrary code execution
CVE-2026-34070High· 7.5LangChain is a framework for building agents and LLM-powered applications