CVE-2023-44467 | BDVDB-2026-213545 Detail

Description#

langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483

Exploit#

No public exploit known

History#

Version 12023-10-09Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.