Skip to content
Threat Feed

Vendor

LangChain

6 briefs RSS
high advisory

Security Bypass Vulnerability in LiteLLM

A vulnerability in LiteLLM, tracked as CVE-2024-4786, allows remote authenticated attackers to circumvent established security controls.

LiteLLM +7
3t 1c updated
high advisory

SSRF via Improper Domain Validation in LangChain SitemapLoader

A logic flaw in langchain_community SitemapLoader allows attackers to bypass domain restrictions, enabling Server-Side Request Forgery to access internal network resources and exfiltrate sensitive content.

langchain_community
2t 1c
high advisory

NoSQL Operator Injection in LangGraph MongoDB Libraries

A NoSQL injection vulnerability in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries allows authenticated attackers to bypass tenant isolation boundaries and exfiltrate sensitive data via injected MongoDB query operators.

langgraph-checkpoint-mongodb +1 nosql-injection data-exposure langchain cve-2026-55253
2t
medium advisory

Detection of Local LLM Model File Creation on Endpoints

This brief describes how the creation of Large Language Model (LLM) files, including formats like .gguf, .safetensors, .ggml, and Modelfiles, by local AI inference frameworks such as Ollama, llama.cpp, GPT4All, and LM Studio can be detected on Windows endpoints, indicating potential shadow AI deployments, unauthorized model downloads, or rogue LLM infrastructure which poses data exfiltration risks and policy violations.

Ollama +9 shadow-it llm data-exfiltration policy-violation endpoint shadow-ai local-llm intellectual-property-theft +2
2r 5t
high advisory

LangSmith SDK Untrusted Manifest Deserialization Vulnerability

The LangSmith SDK is vulnerable to untrusted manifest deserialization when pulling public prompts via `pull_prompt`, potentially leading to SSRF, prompt injection, or sensitive data exposure; CVE-2026-45134.

langsmith +2 deserialization ssrf prompt-injection
2r 3t
high advisory

LangChain Unsafe Deserialization Vulnerability

LangChain is vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists, potentially leading to persistent chat-history poisoning, prompt injection, credential disclosure, or server-side requests.

langchain-core langchain deserialization vulnerability
2r 1t