CVE-2024-8309Medium· 4.9▾ TwilightPoC availableLangchain SQL Injection vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 27 · likelihood 2.7 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
14%
1 GitHub repo
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
langchain-community >= 0.2.0, < 0.2.19langchain < 0.2.0Upgrade to a patched release:
langchain-community 0.2.19langchain 0.2.0Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-2965Medium· 4.2Denial of service in langchain-community
CVE-2024-3095Medium· 4.8Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
CVE-2024-5998Medium· 5.2LangChain pickle deserialization of untrusted data
CVE-2025-6984High· 7.5Langchain Community Vulnerable to XML External Entity (XXE) Attacks