{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/langchain_community/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.6,"id":"CVE-2026-72848"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["langchain_community"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["LangChain"],"content_html":"\u003cp\u003eCVE-2026-72848 identifies a critical server-side request forgery (SSRF) vulnerability within the \u003ccode\u003elangchain_community\u003c/code\u003e library, specifically in the \u003ccode\u003eSitemapLoader\u003c/code\u003e class. The vulnerability arises from an incomplete implementation of the \u003ccode\u003erestrict_to_same_domain\u003c/code\u003e security control. While the loader correctly enforces domain restrictions on leaf URL entries, it fails to apply these same checks to nested sitemap elements.\u003c/p\u003e\n\u003cp\u003eWhen processing sitemaps, the loader recursively handles nested sitemap entries by passing them directly to \u003ccode\u003eWebBaseLoader.scrape_all\u003c/code\u003e and subsequently an \u003ccode\u003eaiohttp\u003c/code\u003e GET request. This process occurs without any validation against internal, loopback, or link-local address spaces. An attacker who can influence the sitemap input provided to the application can force the server to fetch internal resources. Because the application then parses and returns the content of these internal requests to the caller, this flaw results in the unauthorized disclosure of sensitive internal data. This vulnerability affects users deploying LangChain components in environments where they rely on \u003ccode\u003erestrict_to_same_domain\u003c/code\u003e for network isolation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the unauthorized retrieval of internal service data that is otherwise unreachable from the public internet. This includes internal configuration files, metadata services, and internal APIs that are protected by network perimeter defenses but vulnerable to requests originating from within the server environment. This vulnerability poses a high risk to cloud-based deployments and containerized environments where the LangChain application may have implicit access to local network segments or internal cloud metadata endpoints (e.g., 169.254.169.254).\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor egress traffic from application servers hosting LangChain components to detect unusual HTTP requests to internal IP ranges (RFC1918) or local infrastructure services.\u003c/li\u003e\n\u003cli\u003eImplement network-level egress filtering (e.g., via Kubernetes NetworkPolicies or Cloud Security Groups) to restrict the \u003ccode\u003elangchain_community\u003c/code\u003e application's ability to communicate with internal network segments that do not require access.\u003c/li\u003e\n\u003cli\u003eAudit applications utilizing \u003ccode\u003eSitemapLoader\u003c/code\u003e to determine if input sitemaps are sourced from untrusted or user-controlled locations.\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003elangchain_community\u003c/code\u003e to a patched version once released by the vendor to address the logic flaw in \u003ccode\u003eparse_sitemap\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-20T23:26:45Z","date_published":"2026-08-20T23:26:45Z","id":"https://feed.craftedsignal.io/briefs/2026-08-langchain-sitemap-ssrf/","summary":"A logic flaw in langchain_community SitemapLoader allows attackers to bypass domain restrictions, enabling Server-Side Request Forgery to access internal network resources and exfiltrate sensitive content.","title":"SSRF via Improper Domain Validation in LangChain SitemapLoader","url":"https://feed.craftedsignal.io/briefs/2026-08-langchain-sitemap-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Langchain_community","version":"https://jsonfeed.org/version/1.1"}