AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

langchain-core==1.2.9

infonews

security

Source: LangChain Security ReleasesFebruary 5, 2026

Summary

LangChain-core version 1.2.9 includes several bug fixes and improvements, particularly adjusting how the software estimates token counts (the number of units of text an AI processes) when scaling them. The release also reverts a previous change to a hex color regex pattern (a rule for matching color codes) and adds testing improvements.

Classification

Attack SophisticationTrivial

AI Component TargetedFramework

Affected Vendors

LangChain

Related Issues

critical

CVE-2024-27444: langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-

Same vendorNVD/CVE Database

critical

CVE-2025-45150: Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive

Same vendor

Original source: https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.9

First tracked: February 14, 2026 at 03:00 PM

Classified by LLM (prompt v3) · confidence: 85%