CVE-2026-26019: LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in…

Summary

CVE-2026-26019 affects the RecursiveUrlLoader class in @langchain/community before 1.1.14, a web crawler that follows links from a starting URL. Its default preventOutside check compares URLs with String.startsWith(), so an attacker controlling a crawled page can link to look-alike domains or internal infrastructure, and the crawler performs no validation against private or reserved IP addresses, including cloud metadata services, localhost, and RFC 1918 addresses.

Mitigation

Fixed in 1.1.14.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• @langchain/communitynpmLLM dependency since 2023-12-08 · 4 tracked dependents

Related items

• MediumGHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputSame vendor · GitHub Advisory Database
• HighGHSA-4hm6-w6qq-w73v: LangGraph JavaScript custom authentication may permit cross-user Store accessSame vendor · GitHub Advisory Database
• MediumGHSA-3fx2-cqw9-xr3c: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsSame vendor · GitHub Advisory Database
• MediumGHSA-6hmw-9432-67qq: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesSame vendor · GitHub Advisory Database
• MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySame vendor · NVD/CVE Database