{"data":{"id":"dc12d151-22c3-4746-8008-f599d62d6d59","title":"GHSA-2mfg-cc43-9pcj: LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector","summary":"The langchain4j-mariadb and langchain4j-pgvector embedding stores build metadata-filter SQL by concatenating filter keys, and in MariaDB string values, without adequate escaping. A crafted key in EmbeddingSearchRequest.filter() can inject arbitrary SQL into search() and removeAll(Filter) operations. Applications that let attacker-influenced filter keys reach these stores, such as LLM-generated filters, are exposed to blind data exfiltration, denial of service and deletion of arbitrary rows. Applications using only hard-coded filter keys are not reachable.","solution":"Fixed in langchain4j-mariadb and langchain4j-pgvector 1.16.3-beta26. Workarounds: do not pass untrusted input as metadata filter keys, and restrict filter keys to a known allow-list at the application layer.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2mfg-cc43-9pcj","publishedAt":"2026-06-17T18:39:56.000Z","cveId":"CVE-2026-55405","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["dev.langchain4j:langchain4j-pgvector@>= 1.12.1-beta21, <= 1.16.2-beta26 (fixed: 1.16.3-beta26)","dev.langchain4j:langchain4j-pgvector@>= 1.6.0-beta12, <= 1.11.7-beta19 (fixed: 1.11.8-beta19)","dev.langchain4j:langchain4j-pgvector@>= 1.3.0-beta9, <= 1.5.0-beta11 (fixed: 1.5.1-beta11)","dev.langchain4j:langchain4j-pgvector@<= 1.2.0-beta8 (fixed: 1.2.1-beta8)","dev.langchain4j:langchain4j-mariadb@>= 1.12.1-beta21, <= 1.16.2-beta26 (fixed: 1.16.3-beta26)"],"affectedPackageNames":["dev-langchain4j:langchain4j-pgvector","dev-langchain4j:langchain4j-mariadb"],"affectedPackageRefs":["maven:dev-langchain4j:langchain4j-mariadb","maven:dev-langchain4j:langchain4j-pgvector"],"affectedVendors":[],"affectedVendorsRaw":["LangChain4j","langchain4j-mariadb","langchain4j-pgvector"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00474,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-2mfg-cc43-9pcj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-17T18:39:56.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:34:21.665Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":null,"name":"dev.langchain4j:langchain4j-pgvector","fixedVersion":"1.5.1-beta11","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:34:21.518Z"},{"ecosystem":null,"name":"dev.langchain4j:langchain4j-pgvector","fixedVersion":"1.2.1-beta8","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:34:21.518Z"},{"ecosystem":null,"name":"dev.langchain4j:langchain4j-pgvector","fixedVersion":"1.16.3-beta26","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:34:21.518Z"},{"ecosystem":null,"name":"dev.langchain4j:langchain4j-mariadb","fixedVersion":"1.16.3-beta26","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:34:21.518Z"},{"ecosystem":null,"name":"dev.langchain4j:langchain4j-pgvector","fixedVersion":"1.11.8-beta19","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:34:21.518Z"}]}}