Patchfirst
Patchfirst
CVE-2023-44467 EPSS 1.0%

langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the…

Official description · CVE.org

langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.

Breakdown
50.1 / 100
Exploited
Yes, in VulnCheck KEV
Reports
0
Tactics
0/15

First seen exploited 22 months after disclosure.

  1. Disclosedday 0
  2. First seen exploitedVulnCheck KEV evidence+22 mo

See the family tree

A fix was bypassed or incomplete 3 times over 11 months. The latest fix listed for langchain-experimental is 0.0.61.

Same bug familyLinked by evidence that a fix failed or the same code was patched again. Oldest first.

  1. CVE-2023-36258An issue in LangChain before 0.0.236 allows an attacker to…3 Jul 2023
  2. bypassed the fixHigh

    Why these are linked:

    • Stated in the CVE textlangchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.
    This CVECVE-2023-44467langchain_experimental (aka LangChain Experimental) in LangChain…9 Oct 2023
  3. bypassed the fixHigh

    Why these are linked:

    • Stated in the CVE textlangchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__,…
    • Same code patched: base.py (machine-matched)commit 4c97a10commit de9a6cd
    • Similar weakness in the same product (machine-matched)same package + description similarity
    CVE-2024-27444langchain_experimental (aka LangChain Experimental) in LangChain…26 Feb 2024
  4. incomplete fixHigh

    Why these are linked:

    • Stated in the CVE textNOTE; this issue exists because of an incomplete fix for CVE-2024-27444.
    • Fixed one release later0.0.52 → 0.0.61 (langchain-experimental)
    • Same code patched: base.py (machine-matched)commit de9a6cdcommit ce0b0f2
    CVE-2024-38459langchain_experimental (aka LangChain Experimental) before…16 Jun 2024

Fixes in langchain-experimentalPyPI package, by fixed version. Earlier and later fixes in the same package, not necessarily the same bug.

  1. 0.0.15CVE-2023-444679 Oct 2023
  2. 0.0.21CVE-2024-2151315 Jul 2024
  3. 0.0.52CVE-2024-2744426 Feb 2024
  4. 0.0.61CVE-2024-3845916 Jun 2024Latest listed

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

Am I affected? What do I upgrade to?

From GitHub Security Advisories and OSV

1 package in 1 ecosystem. Main package: langchain-experimental.

PyPIlangchain-experimentalGHSA-gjjr-63x4-v8cqPYSEC-2023-194

Upgrade to 0.0.15 or later

pippip install "langchain-experimental>=0.0.15"

The first fix for CVE-2023-44467. No other CVE tracked by Patchfirst affects this package.

Affected versions, by release line

If you runUpgrade to
All versions before 0.0.150.0.15
0.0.14 and earlierNo fix published

“Up to” means the second version is the fix and is not affected.

Check your lockfile against all CVEs

What security researchers reported

Not named in any threat report yet

Also mentioned in 9 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Other 1

github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483
↑ ↓ chooseEnter openEsc close