{"data":{"id":"8b806c72-5762-4757-b287-3889235e009f","title":"CVE-2024-8309: A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection…","summary":"CVE-2024-8309 affects the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5. Attackers can use prompt injection to trigger SQL injection, allowing them to create, update, or delete nodes and relationships without authorization, extract sensitive data, and disrupt service. The flaw can also reach data across tenants in multi-tenant environments and compromise database integrity.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-8309","publishedAt":"2024-10-29T17:15:10.950Z","cveId":"CVE-2024-8309","cweIds":["CWE-89","CWE-74"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["langchain@< 0.2.0 (fixed: 0.2.0)","langchain-community@>= 0.2.0, < 0.2.19 (fixed: 0.2.19)"],"affectedPackageNames":["langchain","langchain-community"],"affectedPackageRefs":["pypi:langchain","pypi:langchain-community"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","GraphCypherQAChain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"langchain GraphCypherQAChain SQL injection through prompt injection","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.13738,"epssCheckedAt":"2026-11-04T12:08:33.950Z","kevDateAdded":null,"advisoryAliases":["GHSA-45pg-36p6-83v9"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:55.369Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-05-17T20:46:05.115Z","daysToFix":-165,"fixCheckedAt":"2026-10-29T21:45:17.250Z","capecIds":["CAPEC-66"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"rag","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"pypi","name":"langchain","fixedVersion":"0.2.0","matchedVersion":"0.2.0","fixReleasedAt":"2024-05-17T20:46:05.115Z","daysToFix":-165,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:17.099Z"},{"ecosystem":"pypi","name":"langchain-community","fixedVersion":"0.2.19","matchedVersion":"0.2.19","fixReleasedAt":"2024-11-12T19:03:56.245Z","daysToFix":14,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:17.099Z"}]}}