CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-36258
Critical (9.8) in langchain langchain. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in langchain 0.0.247.
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- langchain:langchain
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2qmj-7962-cjq8 | PyPI | langchain | <0.0.247 | 0.0.247 |
| PYSEC-2023-98 | PyPI | langchain | <0.0.247 | 0.0.247 |