---
id: CVE-2024-27444
aliases:
  - GHSA-v8vj-cv27-hjv8
  - PYSEC-2026-375
title: LangChain Experimental vulnerable to arbitrary code execution
summary: LangChain Experimental vulnerable to arbitrary code execution
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: langchain-experimental
product: langchain-experimental
ecosystem: pip
affected:
  - langchain-experimental < 0.0.52
patched:
  - langchain-experimental 0.0.52
published: '2024-02-26'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T17:00:04.002430035Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-v8vj-cv27-hjv8'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-27444'
  - url: >-
      https://github.com/langchain-ai/langchain/commit/de9a6cdf163ed00adaf2e559203ed0a9ca2f1de7
  - url: 'https://github.com/langchain-ai/langchain'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/langchain-experimental/PYSEC-2026-375.yaml
  - url: 'https://pypi.org/project/langchain-experimental'
  - url: 'https://github.com/advisories/GHSA-v8vj-cv27-hjv8'
tags:
  - osv
  - pip
  - ghsa
epss: 0.00773
epssPercentile: 0.55501
cwe:
  - CWE-749
ingestedAt: '2026-10-27T17:33:23.772Z'
---

## Overview

langchain_experimental (aka LangChain Experimental) before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the `__import__`, `__subclasses__`, `__builtins__`, `__globals__`, `__getattribute__`, `__bases__`, `__mro__`, or `__base__` attribute in Python code. These are not prohibited by `pal_chain/base.py`.

## Affected packages

- `langchain-experimental < 0.0.52`

## Remediation

Upgrade to a patched release:

- `langchain-experimental 0.0.52`