Vendor
langchain-ai
- CVEs tracked · all time
- 6
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- articles · all time
- 4
No articles in the last 45 daysThe latest: Check Point, Thu 11 Jun, 14:11 UTC.See the full timeline
Products: langgraph, langgraphjs
CVEs
6 CVEsCVE-2026-27022RediSearch Query Injection in @langchain/langgraph-checkpoint-redisCVSS6.5Medium–Not in KEV0.6%EPSS0articles
CVE-2025-68664LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIsCVSS9.3Critical–Not in KEV43%EPSS2articles
CVE-2026-34070LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsCVSS7.5High–Not in KEV1.2%EPSS1article
CVE-2026-25750LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrlCVSS8.5High–Not in KEV0.3%EPSS1article
- Critical LangGraph Checkpointer Bugs Enable Remote Code ExecutionCheck Point
- LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI FrameworksThe Hacker News
- AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCEThe Hacker News
- Case study: Securing AI application supply chainsMicrosoft · first in our coverage