---
id: CVE-2023-32785
aliases:
  - GHSA-8h5w-f6q9-wg35
  - PYSEC-2026-372
title: Langchain SQL Injection vulnerability
summary: Langchain SQL Injection vulnerability
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: langchain
product: langchain
ecosystem: pip
affected:
  - langchain < 0.0.247
patched:
  - langchain 0.0.247
published: '2023-10-21'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T17:45:03.878754648Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-8h5w-f6q9-wg35'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-32785'
  - url: >-
      https://github.com/langchain-ai/langchain/issues/5923#issuecomment-1696053841
  - url: 'https://gist.github.com/rharang/9c58d39db8c01db5b7c888e467c0533f'
  - url: 'https://github.com/langchain-ai/langchain'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2026-372.yaml
  - url: 'https://pypi.org/project/langchain'
  - url: 'https://github.com/advisories/GHSA-8h5w-f6q9-wg35'
tags:
  - osv
  - pip
  - ghsa
cwe:
  - CWE-74
  - CWE-89
ingestedAt: '2026-10-27T17:33:23.766Z'
---

## Overview

In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.

## Affected packages

- `langchain < 0.0.247`

## Remediation

Upgrade to a patched release:

- `langchain 0.0.247`