High severity · published Oct 20, 2023
CVE-2023-32786
In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting…
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
Langchain · Langchain
through 0.0.155 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-32786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-32786
Third Party Advisory
https://gist.github.com/rharang/d265f46fc3161b31ac2e81db44d662e1
More from Langchain
10.0
CVE-2025-2828
SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain
9.8
CVE-2024-8309
SQL Injection in langchain-ai/langchain
9.8
CVE-2024-7042
Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection
9.8
CVE-2024-2057
LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery
9.8
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library