CVE Catalog

CVE-2023-34541

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.86%

54th percentile - higher than 54% of all known CVEs

Summary

Langchain version 0.0.171 is vulnerable to arbitrary code execution in the load_prompt function.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the application.

Recommendation

It is recommended to update Langchain to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS