---
id: CVE-2026-41481
title: >-
  langchain-text-splitters: LangChain: Information Disclosure via Server-Side
  Request Forgery (SSRF) Redirect Bypass (CVE-2026-41481)
summary: >-
  A flaw was found in LangChain and langchain-text-splitters. This
  vulnerability, a Server-Side Request Forgery (SSRF) bypass, allows a remote
  attacker to redirect a seemingly safe URL to internal network resources. By
  exploiting unvalidated…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'
cvssSource: vendor
cwe: CWE-918
vendor: Red Hat
product: Red Hat Ansible Automation Platform 2
affected:
  - migration_toolkit_for_applications 8
  - openshift_lightspeed
  - ansible_automation_platform 2
  - openshift_ai_rhoai
patched:
  - langchain-text-splitters 1.1.2
published: '2026-04-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:00:28+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41481.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41481.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-41481'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2461733'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-41481'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-41481'
  - url: >-
      https://github.com/langchain-ai/langchain/security/advisories/GHSA-fv5p-p927-qmxr
  - url: 'https://github.com/langchain-ai/langchain'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/langchain-text-splitters/PYSEC-2026-77.yaml
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - pip
epss: 0.0026
epssPercentile: 0.17664
aliases:
  - GHSA-fv5p-p927-qmxr
  - PYSEC-2026-77
ecosystem: pip
ingestedAt: '2026-09-12T03:13:01.693Z'
---

## Overview

A flaw was found in LangChain and langchain-text-splitters. This vulnerability, a Server-Side Request Forgery (SSRF) bypass, allows a remote attacker to redirect a seemingly safe URL to internal network resources. By exploiting unvalidated redirects, an attacker could access sensitive data from internal, localhost, or cloud metadata endpoints. This could result in information disclosure or data exfiltration if the application processes and exposes the content from these redirected requests.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI) · no fix planned: Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI) · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41481.json)

**langchain-text-splitters: LangChain: Information Disclosure via Server-Side Request Forgery (SSRF) Redirect Bypass** — rated Important by Red Hat. Released 2026-04-24, updated 2026-10-15.

Affected:

- Migration Toolkit for Applications 8
- OpenShift Lightspeed
- Red Hat Ansible Automation Platform 2
- Red Hat OpenShift AI (RHOAI)

No fix planned:

- Migration Toolkit for Applications 8
- OpenShift Lightspeed
- Red Hat Ansible Automation Platform 2
- Red Hat OpenShift AI (RHOAI)

## Remediation

Fix deferred

Workarounds / mitigations:

- To mitigate this issue, Red Hat customers should ensure that applications utilizing LangChain's HTMLHeaderTextSplitter.split_text_from_url() function do not process untrusted or unvalidated URLs. Implement strict input validation for all URL inputs to prevent redirection to internal network resources. If an application exposes the content of processed Document objects to external requesters, consider reconfiguring the application to restrict such exposure.

## Package advisory (CVE-2026-41481)

Affected packages:

- `langchain-text-splitters < 1.1.2`

Patched in:

- `langchain-text-splitters 1.1.2`

Source: https://osv.dev/vulnerability/GHSA-fv5p-p927-qmxr