Skip to content
COOEY

FAIL › dossier

langchain

VENDOR

· dossier confidence 20%

LangChain is a leading open-source LLM framework that enables developers to build complex AI applications by chaining models with external tools. However, its security posture is severely compromised by a history of critical remote code execution vulnerabilities, including a 2023 RCE in its core PALChain component and a 2026 RCE in its LangSmith SDK, suggesting systemic weaknesses in input validation and code execution boundaries.

Failure events
2
Zero-days
0
RCEs
2
On KEV
0
Critical
1
Worst shame
50
PROFILE
CategoryAI/LLM FrameworkWhat they doLangChain is an open-source framework that helps developers build applications powered by large language models by connecting them to external data sources and tools. Websitehttps://python.langchain.com ↗
SECURITY POSTURE

The company has a critical track record of remote code execution (RCE) vulnerabilities in its core components, including a critical RCE in 2023 and a medium-severity RCE in 2026, indicating systemic issues in input validation and code execution boundaries.

Notable failures
  • CVE-2023-36095 critical RCE via python exec in PALChain
  • CVE-2026-40190 medium RCE in LangSmith JavaScript/TypeScript SDK
Patterns: repeated unpatched RCEs in core components; incomplete input validation in SDKs
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2023-08-05 CVE-2023-36095 critical An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
2023-08-05 CVE-2023-36095 critical An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
2026-04-10 CVE-2026-40190 medium LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScript/TypeScript SDK (langsmith) contains an incomplete prototype pollution fix in its internally vendored lodash set() utility. The baseAssignValue() function onl
DOSSIER SOURCES
Open questions: Exact founding year and HQ location not explicitly confirmed in provided evidence · Current size and ownership structure not explicitly confirmed in provided evidence
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-22 04:07:03.015033+00:00