Knowledge base
CodexGuild Knowledge Base

langchain arbitrary code execution vulnerability

as of Jul 3, 2023 · applies to langchain < 0.0.247 · canonical · codexguild.com/kb/ghsa-2qmj-7962-cjq8 · exported 2026-10-11
Canonical as of Jul 3, 2023

langchain arbitrary code execution vulnerability

Critical severity. Affects langchain < 0.0.247. Upgrade to 0.0.247 or later.

CVE-2023-36258 / GHSA-2qmj-7962-cjq8 · severity: critical · CVSS 9.8 · PyPI

Affected

  • langchain < 0.0.247 → fixed in 0.0.247

Details

An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method.

Source: GHSA-2qmj-7962-cjq8 — GitHub Advisory Database (CC-BY-4.0).