---
id: CVE-2023-32786
aliases:
  - GHSA-6h8p-4hx9-w66c
  - PYSEC-2026-1508
title: Langchain Server-Side Request Forgery vulnerability
summary: Langchain Server-Side Request Forgery vulnerability
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
vendor: langchain
product: langchain
ecosystem: pip
affected:
  - langchain < 0.0.329
patched:
  - langchain 0.0.329
published: '2023-10-21'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-6h8p-4hx9-w66c'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-32786'
  - url: 'https://github.com/langchain-ai/langchain/pull/12747'
  - url: 'https://gist.github.com/rharang/d265f46fc3161b31ac2e81db44d662e1'
  - url: 'https://github.com/langchain-ai/langchain'
  - url: 'https://github.com/langchain-ai/langchain/releases/tag/v0.0.329'
tags:
  - osv
  - pip
epss: 0.00699
epssPercentile: 0.51045
ingestedAt: '2026-07-08T18:25:46.475Z'
---

## Overview

In Langchain before 0.0.329, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.

## Affected packages

- `langchain < 0.0.329`

## Remediation

Upgrade to a patched release:

- `langchain 0.0.329`