{"data":{"id":"07990f4e-8a0a-48ec-a8f1-06723a796686","title":"CVE-2024-28088: LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path…","summary":"CVE-2024-28088 affects LangChain through 0.1.10. An actor who can control the final part of the path parameter in a load_chain call can use ../ directory traversal to bypass the intended restriction on loading configurations only from the hwchase17/langchain-hub GitHub repository. The source says the outcome can be disclosure of an API key for a large language model online service, or remote code execution.","solution":"A patch is available as of release 0.1.29 of langchain-core.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-28088","publishedAt":"2024-03-04T05:15:47.017Z","cveId":"CVE-2024-28088","cweIds":["CWE-22","CWE-31"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain@< 0.0.339 (fixed: 0.0.339)","langchain-core@>= 0, < 0.1.30 (fixed: 0.1.30)"],"affectedPackageNames":["langchain","langchain-core"],"affectedPackageRefs":["pypi:langchain","pypi:langchain-core"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain-core","langchain-hub"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain directory traversal in load_chain path parameter","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0174,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":["GHSA-h59x-p739-982c"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:26.114Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2023-11-20T17:59:28.032Z","daysToFix":-105,"fixCheckedAt":"2026-10-29T21:46:20.303Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain","fixedVersion":"0.0.339","matchedVersion":"0.0.339","fixReleasedAt":"2023-11-20T17:59:28.032Z","daysToFix":-105,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:46:20.151Z"},{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"0.1.30","matchedVersion":"0.1.30","fixReleasedAt":"2024-03-07T01:00:57.054Z","daysToFix":3,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:46:20.151Z"}]}}