{"data":{"id":"07d4ff62-7a0c-4fac-8174-051a9b667a82","title":"GHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs","summary":"langchain-nvidia-ai-endpoints versions before 1.4.2 accepted local filesystem paths as image inputs for Vision Language Model requests. An attacker who controls image input passed to ChatNVIDIA or VLM reranking APIs can read files the application process can access and send them to the configured NVIDIA/NIM model endpoint.","solution":"Upgrade to langchain-nvidia-ai-endpoints >= 1.4.2, which rejects raw local filesystem paths for VLM image inputs. If upgrading is not immediately possible, reject local filesystem paths in user-controlled VLM image inputs, allow only trusted remote URLs, data URIs, or known safe asset/file IDs, and run the application with least-privilege filesystem access.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-g28h-2cmm-rj9x","publishedAt":"2026-09-24T19:25:36.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-nvidia-ai-endpoints@<= 1.4.1 (fixed: 1.4.2)"],"affectedPackageNames":["langchain-nvidia-ai-endpoints"],"affectedPackageRefs":["pypi:langchain-nvidia-ai-endpoints"],"affectedVendors":["NVIDIA"],"affectedVendorsRaw":["langchain-nvidia-ai-endpoints","ChatNVIDIA","NVIDIARerank","NVIDIA NIM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-g28h-2cmm-rj9x"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-24T19:25:36.000Z","fixReleasedAt":"2026-06-23T21:30:27.637Z","daysToFix":-93,"fixCheckedAt":"2026-10-29T21:30:11.829Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-nvidia-ai-endpoints","fixedVersion":"1.4.2","matchedVersion":"1.4.2","fixReleasedAt":"2026-06-23T21:30:27.637Z","daysToFix":-93,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:30:11.684Z"}]}}