{"data":{"id":"1526169a-7130-4ea8-92d6-e2e854148727","title":"GHSA-gr75-jv2w-4656: LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders","summary":"Several LangChain components resolve filesystem paths or expand search patterns without confining the resolved path to the intended root directory. Affected behaviors include a file-search agent middleware that does not check glob patterns or symlink targets, configuration loaders that accept unconfined path fields, and path-prefix checks that lack a path-segment boundary. When these receive path values or search patterns influenced by untrusted input, including an LLM acting on untrusted input, files outside the intended boundary can be disclosed.","solution":"The affected components will canonicalize candidate paths (resolving symlinks) and verify the resolved real path remains within the configured root, normalize search patterns so they cannot escape the root, confine resolved path fields in configuration loaders and reject symlink escapes unless the caller explicitly opts in to dangerous loading, and enforce a path-segment boundary in path-prefix checks. Specific fixed version numbers are not stated in the source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-gr75-jv2w-4656","publishedAt":"2026-06-16T15:03:14.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-anthropic@<= 1.4.5 (fixed: 1.4.6)","langchain@<= 1.3.8 (fixed: 1.3.9)"],"affectedPackageNames":["langchain-anthropic","langchain"],"affectedPackageRefs":["pypi:langchain","pypi:langchain-anthropic"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-gr75-jv2w-4656"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T15:03:14.000Z","fixReleasedAt":"2026-06-12T16:53:25.489Z","daysToFix":-4,"fixCheckedAt":"2026-10-29T21:34:36.992Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-anthropic","fixedVersion":"1.4.6","matchedVersion":"1.4.6","fixReleasedAt":"2026-06-12T16:54:14.159Z","daysToFix":-4,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:36.845Z"},{"ecosystem":"pypi","name":"langchain","fixedVersion":"1.3.9","matchedVersion":"1.3.9","fixReleasedAt":"2026-06-12T16:53:25.489Z","daysToFix":-4,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:36.845Z"}]}}