{"data":{"id":"a1ea31a4-a69f-4e10-81d9-dc45efab37e5","title":"CVE-2026-72848: SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d","summary":"A security flaw in LangChain's SitemapLoader allows attackers to bypass the restrict_to_same_domain control (a setting meant to prevent the tool from fetching content from other websites). The bug happens because nested sitemaps are fetched without checking the domain restriction, so an attacker controlling a sitemap can point it to internal addresses and leak the content back to the caller.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72848","publishedAt":"2026-08-20T22:18:05.553Z","cveId":"CVE-2026-72848","cweIds":["CWE-918"],"cvssScore":"8.6","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-20T22:18:05.553Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}