Vulnerabilities

CVE-2023-36258 | BDVDB-2026-206154 Detail

Description#

An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

https://github.com/hwchase17/langchain/issues/5872

Exploit#

No public exploit known

History#

Version 12023-07-03Record published in the CVE List.
Version 22024-11-22Most recent update recorded in the CVE List.