LangAlpha vulnerabilities
CVEs whose affected-version data names the LangAlpha package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-109440High· 8.1LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCod…
▾ Twilightginlix-ai · LangAlphavia CVEORG
CVE-2026-109441Medium· 5.8LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code exe…
▾ Sunlitginlix-ai · LangAlphavia CVEORG