AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

langchain-core==1.2.9

infonews

security

Source: LangChain Security ReleasesFebruary 5, 2026

Summary

LangChain-core version 1.2.9 includes several bug fixes and improvements, particularly adjusting how the software estimates token counts (the number of units of text an AI processes) when scaling them. The release also reverts a previous change to a hex color regex pattern (a rule for matching color codes) and adds testing improvements.

Classification

Attack SophisticationTrivial

AI Component TargetedFramework

Affected Vendors

LangChain

Related Issues

medium

CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e

Same vendorNVD/CVE Database

critical

CVE-2024-27444: langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-

Same vendor

Monthly digest — independent AI security research

Original source: https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.9

First tracked: February 14, 2026 at 03:00 PM

Classified by LLM (prompt v3) · confidence: 85%