CVE-2023-38860

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.17%

63th percentile - higher than 63% of all known CVEs

Version 0.0.231 of LangChain contains a vulnerability that allows a remote attacker to execute arbitrary code via the prompt parameter.

An attacker could exploit this vulnerability to remotely execute code, potentially leading to serious security breaches in the system.

It is recommended to update LangChain to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.