{"data":{"id":"b727fd1f-de74-4757-a549-00245fbc5a66","title":"CVE-2024-10940: A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized…","summary":"A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 lets unauthorized users read arbitrary files from the host file system. The flaw lies in langchain_core.prompts.ImagePromptTemplate, and by extension ChatPromptTemplate, which can be created with input variables that read any user-specified server path. If the prompt template outputs are exposed to the user, directly or through downstream model outputs, sensitive information can leak.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-10940","publishedAt":"2025-03-20T14:15:21.850Z","cveId":"CVE-2024-10940","cweIds":["CWE-497"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-core@>= 0.1.17, < 0.1.53 (fixed: 0.1.53)","langchain-core@>= 0.2.0, < 0.2.43 (fixed: 0.2.43)","langchain-core@>= 0.3.0, < 0.3.15 (fixed: 0.3.15)"],"affectedPackageNames":["langchain-core"],"affectedPackageRefs":["pypi:langchain-core"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["langchain-core","LangChain","ImagePromptTemplate","ChatPromptTemplate"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"langchain-core arbitrary file read through ImagePromptTemplate input variables","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00396,"epssCheckedAt":"2026-11-04T12:08:35.508Z","kevDateAdded":null,"advisoryAliases":["GHSA-5chr-fjjv-38qv"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:21.600Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-10-31T18:06:17.314Z","daysToFix":-140,"fixCheckedAt":"2026-10-29T21:44:56.152Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"0.3.15","matchedVersion":"0.3.15","fixReleasedAt":"2024-10-31T18:06:17.314Z","daysToFix":-140,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:56.001Z"},{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"0.2.43","matchedVersion":"0.2.43","fixReleasedAt":"2024-10-31T20:30:35.112Z","daysToFix":-140,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:56.001Z"},{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"0.1.53","matchedVersion":"0.1.53","fixReleasedAt":"2024-11-02T00:27:23.144Z","daysToFix":-138,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:56.001Z"}]}}