CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-32786
High (7.5) in langchain langchain. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in langchain 0.0.329.
In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-74
- Published
- Modified
- Record from
- the NVD, synced
Affected
- langchain:langchain
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6h8p-4hx9-w66c | PyPI | langchain | <0.0.329 | 0.0.329 |
| PYSEC-2026-1508 | PyPI | langchain | <0.0.329 | 0.0.329 |