CVE-2026-44843 – langchain / langsmith-sdk
CVSS 8.2
IMPORTANT
“Unsafe deserialization in AI development tools can turn trusted data handling into remote code execution risk.”
langchain-ai released patches for two high-severity vulnerabilities affecting langchain and langsmith-sdk. CVE-2026-44843 has a CVSS score of 8.2, which is High severity. CVE-2026-45134 has a CVSS score of 7.1, which is High severity.
The vulnerabilities involve unsafe deserialization weaknesses that could allow remote code execution in affected environments. The updates strengthen object handling protections and reduce the risk of attackers executing unauthorized code through crafted serialized input.
Key Details
- Affected Product
- Langchain Langchain
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-502
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.