CriticalVulnerability
GHSA-6xc5-4r68-67fc: Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
- Identifiers
- CVE-2026-54760GHSA-6xc5-4r68-67fc
- Published
- Record updated
- Affected
- langroid <= 0.65.0
- Fixed in
- 0.65.1
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.6%
Summary
Langroid's SQLChatAgent blocks dangerous PostgreSQL functions with a raw-text regex that requires the function name to be followed directly by an opening parenthesis. Quoted identifiers, inline comments, or schema qualification (for example pg_catalog."pg_read_file") pass the regex yet still execute pg_read_file on PostgreSQL, restoring the server-side file-read that CVE-2026-25879 / GHSA-pmch-g965-grmr was meant to block.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- langroidPyPILLM dependency since 2023-07-14
Related items
- LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
- MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
- LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
- InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
- InfoAgent Baseline Publishes Security Reference Architecture for Software FactoriesSimilar attack · Socket Blog