{"id":"CVE-2023-44467","published":"2023-10-09T00:00:00Z","modified":"2024-08-02T20:07:33Z","title":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.01039,"percentile":0.63952,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2025-08-20","exploitedFirstSeen":"2025-08-20","ransomware":false,"evidence":[{"url":"https://blog.securelayer7.net/ai-agent-frameworks/","date":"2025-08-20"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":9,"pulses":[{"name":"Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17)","url":"https://otx.alienvault.com/pulse/6790f3fdddb2852d6f638cea","created":"2025-01-22"},{"name":"Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012","url":"https://otx.alienvault.com/pulse/67440fab8ea43bee9b09dd98","created":"2024-11-25"},{"name":"November 18 Advisory: Active Exploitation of Critical RCE in Palo Alto Networks PAN-OS [CVE-2024-0012 and CVE-2024-9474]","url":"https://otx.alienvault.com/pulse/67440c9a8e5cde84eebc504e","created":"2024-11-25"},{"name":"Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012","url":"https://otx.alienvault.com/pulse/673ed04516466c56a42ea7c8","created":"2024-11-21"},{"name":"November 18 Advisory: Active Exploitation of Critical RCE in Palo Alto Networks PAN-OS [CVE-2024-0012 and CVE-2024-9474]","url":"https://otx.alienvault.com/pulse/673ec8b24fa9fef759ac40dc","created":"2024-11-21"},{"name":"Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012","url":"https://otx.alienvault.com/pulse/673c8dfb28bee7fc883a7b66","created":"2024-11-19"},{"name":"November 18 Advisory: Active Exploitation of Critical RCE in Palo Alto Networks PAN-OS [CVE-2024-0012 and CVE-2024-9474]","url":"https://otx.alienvault.com/pulse/673b93354f07f3ac1cb95b15","created":"2024-11-18"},{"name":"Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012","url":"https://otx.alienvault.com/pulse/673b9334d56b73a892d9ffdd","created":"2024-11-18"},{"name":"Mirai Variant Targeting New IoT Vulnerabilities, Network Security Devices","url":"https://otx.alienvault.com/pulse/66d7b3f068ec9e834870e27f","created":"2024-09-04"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"langchain-experimental","vulnerableRanges":["<=0.0.14","<0.0.15"],"patched":["0.0.15"],"from":["GHSA-gjjr-63x4-v8cq","PYSEC-2023-194"],"provenance":"source"}],"advisories":[{"id":"GHSA-gjjr-63x4-v8cq","url":"https://github.com/advisories/GHSA-gjjr-63x4-v8cq","severity":"CRITICAL","ecosystem":"PyPI","package":"langchain-experimental","vulnerableRanges":["<=0.0.14"],"patched":[],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-0109","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0109","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-10-09","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-44467","provenance":"source"},{"date":"2025-08-20","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://blog.securelayer7.net/ai-agent-frameworks/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":50.1,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 437 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":12.79,"detail":"percentile 0.6395"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":2.27,"detail":"9 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-langchain-experimental-cve-2023-36258","parents":[{"from":"CVE-2023-36258","to":"CVE-2023-44467","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.","from":"CVE.org","in":"CVE-2023-44467"}]}],"children":[{"from":"CVE-2023-44467","to":"CVE-2024-27444","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__,…","from":"CVE.org","in":"CVE-2024-27444"},{"kind":"same-code","provenance":"machine","files":["libs/experimental/langchain_experimental/pal_chain/base.py"],"commits":["https://github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483","https://github.com/langchain-ai/langchain/commit/de9a6cdf163ed00adaf2e559203ed0a9ca2f1de7"],"basis":"rarely changed file"},{"kind":"similar","provenance":"machine","score":0.52,"basis":"same package + description similarity"}]},{"from":"CVE-2023-44467","to":"CVE-2024-38459","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["libs/experimental/langchain_experimental/pal_chain/base.py"],"commits":["https://github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483","https://github.com/langchain-ai/langchain/commit/ce0b0f22a175139df8f41cdcfb4d2af411112009"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2023-44467","published":"2023-10-09","fixed":"0.0.15","kev":false},{"cve":"CVE-2024-21513","published":"2024-07-15","fixed":"0.0.21","kev":false,"link":{"from":"CVE-2023-44467","to":"CVE-2024-21513","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langchain-experimental","fromFixed":"0.0.15","toFixed":"0.0.21","daysApart":280}]}},{"cve":"CVE-2024-27444","published":"2024-02-26","fixed":"0.0.52","kev":false},{"cve":"CVE-2024-38459","published":"2024-06-16","fixed":"0.0.61","kev":false}],"package":"PyPI:langchain-experimental"}}