Langchain Remote Code Execution Vulnerability

Evidence indicates that Langchain is affected by remote code execution. Reported affected versions include 0.0.171.

What Happened

Evidence indicates that Langchain is affected by remote code execution. Reported affected versions include 0.0.171.

Why This Matters

The evidence matters to defenders using Langchain because it could let an attacker run code in affected environments.

Recommended Action

Confirm whether Langchain is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.

Exposure

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Affected versions: 0.0.171

Primary entities:

Timeline

• Incident first seen
  Jun 20, 2023 21:01

  BugSkan first recorded this incident.

• Langchain vulnerable to arbitrary code execution
  Jun 20, 2023 21:01

  OSV.dev · Vulnerability

Sources

My Interests Match