{"data":{"id":"91cf3a90-9e28-4efc-81cf-044cf29caebf","title":"CVE-2026-55443: LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components…","summary":"LangChain versions prior to 1.3.9 contain several components that resolve filesystem paths or expand search patterns without confining results to the intended root directory. The file-search agent middleware validates only the starting directory, so glob patterns and symlinks can reach files outside the configured root, and prompt and agent configuration loaders accept path fields without confinement or symlink rejection. When these components receive path values or search patterns influenced by an untrusted source, including an LLM acting on untrusted input, they can disclose files outside the intended boundary.","solution":"Fixed in 1.3.9.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-55443","publishedAt":"2026-06-22T19:17:21.537Z","cveId":"CVE-2026-55443","cweIds":["CWE-22","CWE-59"],"cvssScore":"5.1","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain@<= 1.3.8 (fixed: 1.3.9)","langchain-anthropic@<= 1.4.5 (fixed: 1.4.6)"],"affectedPackageNames":["langchain","langchain-anthropic"],"affectedPackageRefs":["pypi:langchain","pypi:langchain-anthropic"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain path confinement flaws expose files outside intended root","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"local","attackComplexity":"high","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0021,"epssCheckedAt":"2026-11-09T18:09:53.046Z","kevDateAdded":null,"advisoryAliases":["GHSA-gr75-jv2w-4656"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:35.065Z","patchAvailable":true,"disclosureDate":"2026-06-22T19:17:21.537Z","fixReleasedAt":"2026-06-12T16:53:25.489Z","daysToFix":-10,"fixCheckedAt":"2026-10-29T21:33:58.543Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-anthropic","fixedVersion":"1.4.6","matchedVersion":"1.4.6","fixReleasedAt":"2026-06-12T16:54:14.159Z","daysToFix":-10,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:33:58.394Z"},{"ecosystem":"pypi","name":"langchain","fixedVersion":"1.3.9","matchedVersion":"1.3.9","fixReleasedAt":"2026-06-12T16:53:25.489Z","daysToFix":-10,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:33:58.394Z"}]}}