langchain-core has 5 CVEs on record between 2024 and 2026. The median CVSS is 5.3 (medium), with 1 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- langchain-core 5
5
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2025-68664Critical· 9.3LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs72CVE-2024-1455Medium· 5.9LangChain's XMLOutputParser vulnerable to XML Entity Expansion33CVE-2026-40087Medium· 5.3LangChain has incomplete f-string validation in prompt templates29CVE-2024-10940Medium· 5.3langchain-core allows unauthorized users to read arbitrary files from the host file system29CVE-2026-26013Low· 3.7LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages20
langchain-core vulnerabilities
CVEs affecting langchain-core, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-40087Medium· 5.3LangChain has incomplete f-string validation in prompt templates
LangChain has incomplete f-string validation in prompt templates
▾ Sunlitlangchain-core · langchain-coreEPSS 0.26%via OSV
CVE-2026-26013Low· 3.7LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
▾ Sunlitlangchain-core · langchain-coreEPSS 0.43%via OSV
CVE-2025-68664Critical· 9.3PoCLangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
▾ Abyssallangchain-core · langchain-coreEPSS 43%via OSV
CVE-2024-10940Medium· 5.3langchain-core allows unauthorized users to read arbitrary files from the host file system
langchain-core allows unauthorized users to read arbitrary files from the host file system
▾ Sunlitlangchain-core · langchain-coreEPSS 0.40%via OSV
CVE-2024-1455Medium· 5.9LangChain's XMLOutputParser vulnerable to XML Entity Expansion
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
▾ Sunlitlangchain-core · langchain-coreEPSS 0.76%via OSV