CVE-2023-32786 json
Langchain Server-Side Request Forgery vulnerability
published 2023-10-20 3 y ago modified 2026-07-07 4 mo ago also GHSA-6h8p-4hx9-w66c , PYSEC-2026-1508 , EUVD-2023-2674
- cvss
- 7.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 53%
- public exploits
- 0
- none known
Summary
In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.
Patch / fix
- pypi langchain 0.0.329
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.71% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | langchain | <0.0.329 |
0.0.329 |
Classification
References
-
github.com
/langchain-ai/langchain/pull/12747
web
-
gist.github.com
/rharang/d265f46fc3161b31ac2e81db44d662e1
web, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2023-32786
advisory
-
github.com
/langchain-ai/langchain
package
-
github.com
/langchain-ai/langchain/releases/tag/v0.0.329
web
-
pypi.org
/project/langchain
package
-
github.com
/advisories/GHSA-6h8p-4hx9-w66c
advisory
Sources
- CVE List CVE-2023-32786
- GitHub Advisory GHSA-6h8p-4hx9-w66c
- NVD CVE-2023-32786
- OSV PYSEC-2026-1508
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.