CVE-2024-5998: langchain FAISS.deserialize_from_bytes unsafe pickle deserialization

Summary

CVE-2024-5998 affects the FAISS.deserialize_from_bytes function in langchain-ai/langchain, which allows pickle deserialization of untrusted data. The issue affects the latest version of the product, and it can lead to the execution of arbitrary commands via the os.system function. The weakness is classified as CWE-502, Deserialization of Untrusted Data.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• langchain-communityPyPILLM dependency since 2023-12-08 · 27 tracked dependents

Topics

• Model and package supply chain

Related items

• MediumGHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputSame vendor · GitHub Advisory Database
• HighGHSA-4hm6-w6qq-w73v: LangGraph JavaScript custom authentication may permit cross-user Store accessSame vendor · GitHub Advisory Database
• MediumGHSA-3fx2-cqw9-xr3c: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsSame vendor · GitHub Advisory Database
• MediumGHSA-6hmw-9432-67qq: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesSame vendor · GitHub Advisory Database
• MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySame vendor · NVD/CVE Database