All vulnerabilities
CVE-2023-32785GHSA-8h5w-f6q9-wg35PYSEC-2026-372

langchain: Rejected: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36189. Reason: This record is a duplicate of CVE-2023-36189. Notes: All CVE users should reference CVE-2023-36189 instead of this r

langchainpipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in0.0.247Fixed versionGitHub
Published21 Oct 2023Updated 27 Oct 2026CVE List

What fixes it

  • 0.0.247langchain, pipGitHub
  • 0.0.247langchain, PyPIOSVpip install "langchain>=0.0.247"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.

Text from CVE List

Affected versions 52

  • langchain, pip< 0.0.247GitHub
  • langchain, PyPIfrom first release, fixed in 0.0.247OSV
  • langchain, PyPI0.0.1OSV
  • langchain, PyPI0.0.10OSV
  • langchain, PyPI0.0.100OSV
  • langchain, PyPI0.0.101OSV
  • langchain, PyPI0.0.101rc0OSV
  • langchain, PyPI0.0.102OSV
  • langchain, PyPI0.0.102rc0OSV
  • langchain, PyPI0.0.103OSV
  • langchain, PyPI0.0.104OSV
  • langchain, PyPI0.0.105OSV
  • langchain, PyPI0.0.106OSV
  • langchain, PyPI0.0.107OSV
  • langchain, PyPI0.0.108OSV
  • langchain, PyPI0.0.109OSV
  • langchain, PyPI0.0.11OSV
  • langchain, PyPI0.0.110OSV
  • langchain, PyPI0.0.111OSV
  • langchain, PyPI0.0.112OSV
  • langchain, PyPI0.0.113OSV
  • langchain, PyPI0.0.114OSV
  • langchain, PyPI0.0.115OSV
  • langchain, PyPI0.0.116OSV
  • langchain, PyPI0.0.117OSV
  • langchain, PyPI0.0.118OSV
  • langchain, PyPI0.0.119OSV
  • langchain, PyPI0.0.12OSV
  • langchain, PyPI0.0.120OSV
  • langchain, PyPI0.0.121OSV
  • langchain, PyPI0.0.122OSV
  • langchain, PyPI0.0.123OSV
  • langchain, PyPI0.0.124OSV
  • langchain, PyPI0.0.125OSV
  • langchain, PyPI0.0.126OSV
  • langchain, PyPI0.0.127OSV
  • langchain, PyPI0.0.128OSV
  • langchain, PyPI0.0.129OSV
  • langchain, PyPI0.0.13OSV
  • langchain, PyPI0.0.130OSV
  • langchain, PyPI0.0.131OSV
  • langchain, PyPI0.0.132OSV
  • langchain, PyPI0.0.133OSV
  • langchain, PyPI0.0.134OSV
  • langchain, PyPI0.0.135OSV
  • langchain, PyPI0.0.136OSV
  • langchain, PyPI0.0.137OSV
  • langchain, PyPI0.0.138OSV
  • langchain, PyPI0.0.139OSV
  • langchain, PyPI0.0.14OSV
  • langchain, PyPI0.0.140OSV
  • langchain, PyPI0.0.141OSV

References 6