---
id: CVE-2024-5998
aliases:
  - GHSA-f2jm-rw3h-6phg
  - PYSEC-2026-1514
title: LangChain pickle deserialization of untrusted data
summary: LangChain pickle deserialization of untrusted data
severity: medium
cvss: 5.2
cvssVector: 'CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L'
vendor: langchain-community
product: langchain-community
ecosystem: pip
affected:
  - langchain-community < 0.2.4
patched:
  - langchain-community 0.2.4
published: '2024-09-17'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-f2jm-rw3h-6phg'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-5998'
  - url: >-
      https://github.com/langchain-ai/langchain/commit/604dfe2d99246b0c09f047c604f0c63eafba31e7
  - url: >-
      https://github.com/langchain-ai/langchain/commit/77209f315efd13442ec51c67719ba37dfaa44511
  - url: 'https://github.com/langchain-ai/langchain'
  - url: 'https://huntr.com/bounties/fa3a2753-57c3-4e08-a176-d7a3ffda28fe'
tags:
  - osv
  - pip
epss: 0.00361
epssPercentile: 0.27081
ingestedAt: '2026-07-08T18:25:48.621Z'
---

## Overview

A vulnerability in the `FAISS.deserialize_from_bytes` function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the `os.system` function. The issue affects versions prior to 0.2.4.

## Affected packages

- `langchain-community < 0.2.4`

## Remediation

Upgrade to a patched release:

- `langchain-community 0.2.4`