{"data":{"id":"3e5e2430-fc11-4d9a-9a1e-695af0c87b70","title":"CVE-2025-6985: The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE)…","summary":"CVE-2025-6985 affects the HTMLSectionSplitter class in langchain-text-splitters version 0.3.8. The class accepts arbitrary XSLT stylesheets and parses them with lxml.etree.parse() and lxml.etree.XSLT() without hardening, enabling XML External Entity (XXE) attacks. Remote attackers with no authentication, privileges or user interaction could read any file the LangChain process can reach, such as SSH keys, environment files, source code or cloud metadata, in default deployments that enable custom XSLT.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-6985","publishedAt":"2025-10-06T22:15:52.857Z","cveId":"CVE-2025-6985","cweIds":["CWE-611"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-text-splitters@< 0.3.9 (fixed: 0.3.9)"],"affectedPackageNames":["langchain-text-splitters"],"affectedPackageRefs":["pypi:langchain-text-splitters"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain-text-splitters"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"HTMLSectionSplitter in langchain-text-splitters XXE via unsafe XSLT parsing","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00508,"epssCheckedAt":"2026-11-04T06:10:14.105Z","kevDateAdded":null,"advisoryAliases":["GHSA-m42m-m8cr-8m58"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:22.971Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-07-24T14:38:43.953Z","daysToFix":-74,"fixCheckedAt":"2026-10-29T21:43:29.838Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-text-splitters","fixedVersion":"0.3.9","matchedVersion":"0.3.9","fixReleasedAt":"2025-07-24T14:38:43.953Z","daysToFix":-74,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:43:29.686Z"}]}}