CVE-2025-6984High· 7.5▾ TwilightLangchain Community Vulnerable to XML External Entity (XXE) Attacks
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
1.5%
1.5% → 1.7%
Last analysed / modified upstream
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The vulnerability arises from the use of etree.iterparse() without disabling external entity references, which can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data such as /etc/passwd. This issue has been fixed in 0.3.27 of langchain-community.
langchain-community < 0.3.27Upgrade to a patched release:
langchain-community 0.3.27Connected by shared product, vendor, weakness, or advisory.
CVE-2024-2965Medium· 4.2Denial of service in langchain-community
CVE-2024-3095Medium· 4.8Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
CVE-2024-5998Medium· 5.2LangChain pickle deserialization of untrusted data
CVE-2024-8309Medium· 4.9Langchain SQL Injection vulnerability