CVE-2023-36188: langchain remote code execution via PALChain parameter

Summary

CVE-2023-36188 affects langchain v.0.0.64. A remote attacker can execute arbitrary code through the PALChain parameter in the Python exec method. The NIST NVD has not yet provided an assessment, and the weakness is classified as CWE-74, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection').

Mitigation

The source references a patch at https://github.com/hwchase17/langchain/pull/6003, but it does not describe the fix, a fixed version or a workaround.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• langchainPyPILLM dependency since 2022-10-25 · 31 tracked dependents

Related items

• MediumGHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputSame vendor · GitHub Advisory Database
• HighGHSA-4hm6-w6qq-w73v: LangGraph JavaScript custom authentication may permit cross-user Store accessSame vendor · GitHub Advisory Database
• MediumGHSA-3fx2-cqw9-xr3c: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsSame vendor · GitHub Advisory Database
• MediumGHSA-6hmw-9432-67qq: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesSame vendor · GitHub Advisory Database
• MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySame vendor · NVD/CVE Database