CVE-2023-39659 | BDVDB-2026-209772 Detail

Description#

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/langchain-ai/langchain/issues/7700
https://github.com/langchain-ai/langchain/pull/5640

Exploit#

No public exploit known

History#

Version 12023-08-15Record published in the CVE List.
Version 22024-10-08Most recent update recorded in the CVE List.