{"data":{"id":"d451ebf2-1b7f-4b71-8446-b5b63e38c44d","title":"CVE-2026-41481: LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2…","summary":"LangChain's langchain-text-splitters, prior to 1.1.2, validated the initial URL in HTMLHeaderTextSplitter.split_text_from_url() but fetched it with requests.get() while redirects were enabled and never revalidated redirect targets. An attacker-controlled URL could therefore redirect to internal, localhost, or cloud metadata endpoints, bypassing SSRF protections. Exfiltration depends on the application: it is possible only if the returned Document contents are exposed back to the requester who supplied the URL.","solution":"Fixed in 1.1.2","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41481","publishedAt":"2026-04-24T21:16:19.490Z","cveId":"CVE-2026-41481","cweIds":["CWE-918"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-text-splitters@< 1.1.2 (fixed: 1.1.2)"],"affectedPackageNames":["langchain-text-splitters"],"affectedPackageRefs":["pypi:langchain-text-splitters"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain-text-splitters"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"langchain-text-splitters SSRF via redirects in HTMLHeaderTextSplitter","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.0026,"epssCheckedAt":"2026-11-10T00:11:23.778Z","kevDateAdded":null,"advisoryAliases":["GHSA-fv5p-p927-qmxr"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:08.319Z","patchAvailable":true,"disclosureDate":"2026-04-24T21:16:19.490Z","fixReleasedAt":"2026-04-16T14:20:38.243Z","daysToFix":-8,"fixCheckedAt":"2026-10-29T21:37:19.674Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-text-splitters","fixedVersion":"1.1.2","matchedVersion":"1.1.2","fixReleasedAt":"2026-04-16T14:20:38.243Z","daysToFix":-8,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:19.527Z"}]}}