{"data":{"id":"51fb1fdb-be21-4f50-8ce9-9dcd9036cf68","title":"GHSA-3644-q5cj-c5c7: LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning","summary":"The LangSmith SDK's prompt pull methods (`pull_prompt` / `pull_prompt_commit` in Python, `pullPrompt` / `pullPromptCommit` in JS/TS) deserialize prompt manifests from the LangSmith Hub without distinguishing public prompts pulled by `owner/name` from prompts within the caller's own organization. A malicious or compromised publisher can supply manifests that instantiate LangChain objects with attacker-chosen constructor arguments, such as an LLM `base_url`, which can redirect traffic and expose prompts, credentials and other secrets, or alter model behavior.","solution":"The LangSmith SDK now blocks pulling public prompts by `owner/name` by default; callers must pass `dangerously_pull_public_prompt=True` (Python) or `dangerouslyPullPublicPrompt: true` (JS/TS) after reviewing the prompt contents. Upgrade to LangSmith SDK Python >= 0.8.0 or JS/TS >= 0.6.0.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3644-q5cj-c5c7","publishedAt":"2026-05-13T15:29:30.000Z","cveId":"CVE-2026-45134","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain","prompt_injection"],"issueType":"vulnerability","affectedPackages":["langchain@< 0.3.30 (fixed: 0.3.30)","langchain-classic@< 1.0.7 (fixed: 1.0.7)","langsmith@< 0.6.0 (fixed: 0.6.0)","langsmith@< 0.8.0 (fixed: 0.8.0)"],"affectedPackageNames":["langchain","langchain-classic","langsmith"],"affectedPackageRefs":["pypi:langsmith","npm:langsmith","pypi:langchain-classic","pypi:langchain"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangSmith","LangChain","LangSmith Hub"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00199,"epssCheckedAt":"2026-11-07T00:12:14.554Z","kevDateAdded":null,"advisoryAliases":["GHSA-3644-q5cj-c5c7"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-13T15:29:30.000Z","fixReleasedAt":"2026-01-02T18:42:11.966Z","daysToFix":-131,"fixCheckedAt":"2026-10-29T21:36:29.056Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"],"fixes":[{"ecosystem":"npm","name":"langsmith","fixedVersion":"0.8.0","matchedVersion":"0.8.0","fixReleasedAt":"2026-07-08T13:28:33.225Z","daysToFix":56,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:28.908Z"},{"ecosystem":"pypi","name":"langsmith","fixedVersion":"0.8.0","matchedVersion":"0.8.0","fixReleasedAt":"2026-04-30T22:13:05.560Z","daysToFix":-13,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:28.908Z"},{"ecosystem":"pypi","name":"langchain","fixedVersion":"0.3.30","matchedVersion":"0.3.30","fixReleasedAt":"2026-05-07T15:48:10.607Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:28.908Z"},{"ecosystem":"pypi","name":"langchain-classic","fixedVersion":"1.0.7","matchedVersion":"1.0.7","fixReleasedAt":"2026-05-07T15:46:54.845Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:28.908Z"},{"ecosystem":"npm","name":"langsmith","fixedVersion":"0.6.0","matchedVersion":"0.6.0","fixReleasedAt":"2026-04-30T22:11:51.190Z","daysToFix":-13,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:28.908Z"},{"ecosystem":"pypi","name":"langsmith","fixedVersion":"0.6.0","matchedVersion":"0.6.0","fixReleasedAt":"2026-01-02T18:42:11.966Z","daysToFix":-131,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:28.908Z"}]}}