EXPOSURES › CVE-2023-36095
CVE-2023-36095
CRITICAL
DETAIL
SourceNVD · cve
Published2023-08-05
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-36095 ↗
⚡ RCE
SHAME 50/100
rce
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.