CVE-2023-39659

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.27%

66th percentile - higher than 66% of all known CVEs

Summary

Versions of langchain langchain-ai up to 0.0.232 contain a vulnerability that allows a remote attacker to execute arbitrary code via a crafted script in the PythonAstREPLTool._run component.

Risk Assessment

An attacker could exploit this vulnerability to remotely execute unauthorized code, potentially leading to serious security implications for the system.

Recommendation

It is recommended to upgrade to the latest version of langchain langchain-ai to mitigate this vulnerability.

Original NVD description (English source)

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.