CVE-2026-97869: A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the fun

A vulnerability was found in langchain4j (a framework for building AI applications) up to versions 1.5.3-beta10, 1.11.10-beta18, and 1.18.1-beta27 in a function called AgenticScopeSerializer.fromJson that improperly handles deserialization (converting data back into objects, which can allow attackers to inject malicious code). Remote attackers could potentially exploit this, though it requires high complexity and the application must have a specific feature called AgenticScope persistence enabled.