{"data":{"id":"ca3f2521-633f-4d72-b991-aff3fe819f97","title":"CVE-2025-68664: LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a…","summary":"LangChain's dumps() and dumpd() functions do not escape dictionaries containing the 'lc' key when serializing free-form dictionaries. User-controlled data with this key structure is treated as a legitimate LangChain object during deserialization rather than plain data. The issue affects versions prior to 0.3.81 and 1.2.5.","solution":"This issue has been patched in versions 0.3.81 and 1.2.5.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68664","publishedAt":"2025-12-24T04:15:44.933Z","cveId":"CVE-2025-68664","cweIds":["CWE-502"],"cvssScore":"9.3","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-core@>= 1.0.0, < 1.2.5 (fixed: 1.2.5)","langchain-core@< 0.3.81 (fixed: 0.3.81)"],"affectedPackageNames":["langchain-core"],"affectedPackageRefs":["pypi:langchain-core"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain serialization injection in dumps and dumpd functions","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.4293,"epssCheckedAt":"2026-11-04T18:09:13.251Z","kevDateAdded":null,"advisoryAliases":["GHSA-c67j-w6g6-q2cm"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:33.025Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-12-22T23:45:30.525Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:42:15.457Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"0.3.81","matchedVersion":"0.3.81","fixReleasedAt":"2025-12-23T01:02:27.008Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:15.307Z"},{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"1.2.5","matchedVersion":"1.2.5","fixReleasedAt":"2025-12-22T23:45:30.525Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:15.307Z"}]}}