CVE-2024-0243Low· 3.7▾ Sunlitlangchain Server-Side Request Forgery vulnerability
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.5%
With the following crawler configuration:
from bs4 import BeautifulSoup as Soup
url = "https://example.com"
loader = RecursiveUrlLoader(
url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text
)
docs = loader.load()
An attacker in control of the contents of https://example.com could place a malicious HTML file in there with links like "https://example.completely.different/my_file.html" and the crawler would proceed to download that file as well even though prevent_outside=True.
Resolved in https://github.com/langchain-ai/langchain/pull/15559
langchain < 0.1.0Upgrade to a patched release:
langchain 0.1.0Connected by shared product, vendor, weakness, or advisory.
CVE-2024-3571Medium· 6.5langchain vulnerable to path traversal
CVE-2026-55443Medium· 5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
CVE-2023-32786High· 7.5Langchain Server-Side Request Forgery vulnerability
CVE-2023-36188Critical· 9.8langchain vulnerable to arbitrary code execution
CVE-2026-34070High· 7.5LangChain is a framework for building agents and LLM-powered applications
GHSA-gr75-jv2w-4656Medium· 5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders