{"data":{"id":"dcde1755-3c9a-4cee-8898-465085895f6f","title":"CVE-2025-2828: A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community…","summary":"CVE-2025-2828 is a Server-Side Request Forgery (SSRF) flaw in the RequestsToolkit component of the langchain-community package (langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. The toolkit does not restrict requests to local addresses, so an attacker could port scan, reach local services, retrieve cloud instance metadata (such as Azure and AWS), and interact with servers on the local network.","solution":"Fixed in version 0.0.28.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-2828","publishedAt":"2025-06-24T01:15:25.210Z","cveId":"CVE-2025-2828","cweIds":["CWE-918"],"cvssScore":"10","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-community@< 0.0.28 (fixed: 0.0.28)"],"affectedPackageNames":["langchain-community"],"affectedPackageRefs":["pypi:langchain-community"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain-community","RequestsToolkit"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"langchain-community RequestsToolkit SSRF allows access to local addresses","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.21019,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-h5gc-rm8j-5gpr"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:35.422Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-03-12T21:59:45.631Z","daysToFix":-469,"fixCheckedAt":"2026-10-29T21:44:20.277Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-community","fixedVersion":"0.0.28","matchedVersion":"0.0.28","fixReleasedAt":"2024-03-12T21:59:45.631Z","daysToFix":-469,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:20.127Z"}]}}