CVE Catalog
CVE-2023-36188
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.57%
72th percentile - higher than 72% of all known CVEs
Summary
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
Risk Assessment
An attacker could exploit this vulnerability to remotely execute code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update langchain to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.