{"data":{"id":"cfc91b7a-e2ad-4bbb-b0cf-3e892ec2be36","title":"CVE-2024-46946: langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute…","summary":"CVE-2024-46946 affects langchain_experimental (LangChain Experimental) versions 0.1.17 through 0.3.0. The flaw lies in LLMSymbolicMathChain, which passes input to sympy.sympify, which uses eval, allowing attackers to execute arbitrary code. The chain was introduced on 2023-10-05, and NVD has not yet provided an assessment.","solution":"Release notes for langchain-experimental==0.3.0 are referenced in the source, but the source does not state the fix or a workaround in its text. The source text does not describe a mitigation; see https://github.com/langchain-ai/langchain/releases/tag/langchain-experimental%3D%3D0.3.0 for release notes.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-46946","publishedAt":"2024-09-19T09:15:11.857Z","cveId":"CVE-2024-46946","cweIds":["CWE-20"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-experimental@>= 0.1.17, <= 0.3.0"],"affectedPackageNames":["langchain-experimental"],"affectedPackageRefs":["pypi:langchain-experimental"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain_experimental","LLMSymbolicMathChain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain Experimental arbitrary code execution through LLMSymbolicMathChain","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01387,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":["GHSA-p2qj-r53j-h3xj"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:55:13.985Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}