CVE-2023-36095 | BDVDB-2026-208741 Detail

Description#

An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/hwchase17/langchain
https://github.com/langchain-ai/langchain/issues/5872

Exploit#

No public exploit known

History#

Version 12023-08-05Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.