langroid has 11 CVEs on record between 2025 and 2026. Disclosures have slowed: 0 in the last 90 days after 7 in the 90 before. The busiest recent month was July 2026 with 6. The median CVSS is 9.8 (critical), with 6 rated critical. None have a confirmed exploitation report. The most common weakness class is CWE-22 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 7
Worst active — by depth score
CVE-2026-54769Critical· 10.0Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent55CVE-2026-25879Critical· 9.8Langroid has Prompt to SQL Injection, Leading to RCE54CVE-2025-46724Critical· 9.8Langroid has a Code Injection vulnerability in TableChatAgent54CVE-2026-55615CriticalLangroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-2587952CVE-2026-54760CriticalLangroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls52
langroid vulnerabilities
CVEs affecting langroid, newest first. Open any entry for full detail, references, and exploit status.
11 CVEsRSS
CVE-2026-55615CriticalLangroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
CVE-2026-54760CriticalLangroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
CVE-2026-54769Critical· 10.0Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent
Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent
CVE-2026-54771High· 8.1Langroid: handle_message() executes user-supplied tool JSON without sender verification
Langroid: handle_message() executes user-supplied tool JSON without sender verification
CVE-2026-50180HighLangroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
CVE-2026-50181High· 7.1PoCLangroid: Path traversal in the file tools allows read/write outside configured current directory
Langroid: Path traversal in the file tools allows read/write outside configured current directory
CVE-2026-25879Critical· 9.8Langroid has Prompt to SQL Injection, Leading to RCE
Langroid has Prompt to SQL Injection, Leading to RCE
CVE-2026-25481CriticalLangroid has WAF Bypass Leading to RCE in TableChatAgent
Langroid has WAF Bypass Leading to RCE in TableChatAgent
CVE-2025-46724Critical· 9.8Langroid has a Code Injection vulnerability in TableChatAgent
Langroid has a Code Injection vulnerability in TableChatAgent
CVE-2025-46725HighLangroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store
Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store
CVE-2025-46726HighLangroid Allows XXE Injection via XMLToolMessage
Langroid Allows XXE Injection via XMLToolMessage