{"data":{"id":"20412666-d06f-4060-80e4-9ac1e072ff55","title":"CVE-2026-41488: LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's…","summary":"LangChain versions prior to 1.1.14 contain a flaw in the langchain-openai package's _url_to_size() helper, which get_num_tokens_from_messages uses for image token counting. The helper validates a URL against SSRF protections, then fetches it in a separate network operation with independent DNS resolution. An attacker-controlled hostname can resolve to a public IP during validation and to a private or localhost IP during the fetch, a TOCTOU / DNS rebinding window.","solution":"Fixed in 1.1.14.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41488","publishedAt":"2026-04-24T21:16:19.637Z","cveId":"CVE-2026-41488","cweIds":["CWE-918"],"cvssScore":"3.1","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-openai@< 1.1.14 (fixed: 1.1.14)"],"affectedPackageNames":["langchain-openai"],"affectedPackageRefs":["pypi:langchain-openai"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain-openai"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain OpenAI SSRF bypass via DNS rebinding in image token counting","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00158,"epssCheckedAt":"2026-11-11T00:13:30.166Z","kevDateAdded":null,"advisoryAliases":["GHSA-r7w7-9xr2-qq2r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:07.824Z","patchAvailable":true,"disclosureDate":"2026-04-24T21:16:19.637Z","fixReleasedAt":"2026-04-16T14:55:23.159Z","daysToFix":-8,"fixCheckedAt":"2026-10-29T21:37:18.789Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-openai","fixedVersion":"1.1.14","matchedVersion":"1.1.14","fixReleasedAt":"2026-04-16T14:55:23.159Z","daysToFix":-8,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:18.643Z"}]}}