Vulnerabilitycritical
Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-68664 | Serialization Injection in LangChain Core dumps()/dumpd() Exposes Secrets | 8.2 | 43% | PoC ×2 | |
| CVE-2025-68665 | LangChain: And prior to langchain versions 0.3.37 and 1.2.3, a serialization injection vulnerability exists in LangChain JS's toJSON()… | 9.1 | <1% |
From the original article
2 min read at thehackernews.com
A critical security flaw has been disclosed in LangChain Core that could be exploited by an attacker to steal sensitive secrets and even influence large language model (LLM) responses through prompt injection. LangChain Core (i. e.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.