Langroid

11 CVEs across 1 Langroid products. Browse Langroid vulnerabilities, severities, and proof-of-concept exploits.

Langroid products with known CVEs

ProductCVEs
Langroid11
Langroid CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-556152026-07-10Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries str…
CVE-2026-54771High8.12026-07-10Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application exposing a chat interface to un…
CVE-2026-54769Critical10.02026-07-10Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to…
CVE-2026-547602026-07-10Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the `SQLChatAgent` SQL-injection mitigation, with defa…
CVE-2026-50181High7.12026-07-10Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `ReadFileTool` and `WriteFileTool` appear t…
CVE-2026-501802026-07-10Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, `SQLChatAgent` in `langroid` ships a `_validate_query`…
CVE-2026-25879Critical9.82026-06-01Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is…
CVE-2026-25481Critical9.62026-02-04Langroid is a framework for building large-language-model-powered applications. Prior to version 0.59.32, there is a bypass to the fix for CVE-2025-46724. Tabl…
CVE-2025-46725Critical9.82025-05-20Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() throu…
CVE-2025-46724Critical9.82025-05-20Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fe…
CVE-2025-46726Critical9.12025-05-05Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class ma…