CVE-2026-55405 json
LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector
published 2026-06-17 4 mo ago modified 2026-07-13 3 mo ago also GHSA-2mfg-cc43-9pcj , EUVD-2026-43027
- cvss
- 7.6
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 41%
- public exploits
- 0
- none known
Summary
LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly into the query without adequate escaping. A crafted metadata key in EmbeddingSearchRequest.filter() can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores' search and removeAll(Filter) operations, enabling blind data exfiltration, denial of service via sleep functions, and deletion of arbitrary rows through removeAll(Filter). This issue is fixed in langchain4j-mariadb and langchain4j-pgvector versions 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26.
Patch / fix
- maven dev.langchain4j:langchain4j-mariadb 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, 1.16.3-beta26
- maven dev.langchain4j:langchain4j-pgvector 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, 1.16.3-beta26
- github.com/langchain4j/langchain4j@13a0698 commit
- github.com/langchain4j/langchain4j@1bc1f60 commit
- github.com/langchain4j/langchain4j@8805d5d commit
- github.com/langchain4j/langchain4j@ce96291 commit
- github.com/langchain4j/langchain4j@f14a10c commit
- github.com/langchain4j/langchain4j/releases/tag/1.16.3 release
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 3 mo ago
Exploit prediction
0.47% chance of exploitation in the next 30 days, higher than 41% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L |
| GitHub | 3.1 | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | dev.langchain4j:langchain4j-mariadb | <1.2.1-beta8 >=1.3.0-beta9, <1.5.1-beta11 >=1.6.0-beta12, <1.11.8-beta19 >=1.12.1-beta21, <1.16.3-beta26 |
1.2.1-beta8 1.5.1-beta11 1.11.8-beta19 1.16.3-beta26 |
| maven | dev.langchain4j:langchain4j-pgvector | <1.2.1-beta8 >=1.3.0-beta9, <1.5.1-beta11 >=1.6.0-beta12, <1.11.8-beta19 >=1.12.1-beta21, <1.16.3-beta26 |
1.2.1-beta8 1.5.1-beta11 1.11.8-beta19 1.16.3-beta26 |
Affected products
- langchain4j langchain4j
Classification
- Weakness
-
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
- github.com /langchain4j/langchain4j/commit/13a0698bdfaf105d8aaf0367881df51358596219
- github.com /langchain4j/langchain4j/commit/1bc1f60aa58ef5c3c1703caf73362482480351cf
- github.com /langchain4j/langchain4j/commit/8805d5d128694302f1b0a2650174186862f669e7
- github.com /langchain4j/langchain4j/commit/ce96291dfb243c7f6753b5d65c7a77914642314f
- github.com /langchain4j/langchain4j/commit/f14a10ce77e4ea1b8277f67d6a81f46abd7a5bc2
-
github.com
/langchain4j/langchain4j/security/advisories/GHSA-2mfg-cc43-9pcj
web
- github.com /langchain4j/langchain4j/releases/tag/1.16.3
-
github.com
/langchain4j/langchain4j
package
Sources
- CVE List CVE-2026-55405
- GitHub Advisory GHSA-2mfg-cc43-9pcj
- NVD CVE-2026-55405
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.