Sploitus

37 exploited vulnerabilities in Langchain

Vulnerabilities with publicly known exploits

Vendors
Langchain Ai, Langchain, Red Os, Numexpr, Langflow, Unknown
With known exploits
37
Affected Langchain versions
< 0.0.28, 0.0.245, 0.2.5, 0.0.26, 0.0.232, 0.0.194, 0.0.231, 0.0.171, 0.0.199, 0.0.64, 0.0.131, 0.0.351, 0.0.317, 0.3.1, 0.2.9, 0.3.85, 1.3.3, 0.1.12, 0.1.0, 0.0.155, 0.1.35, 1.3.9
Affected Langflow versions
< 1.8.0
Affected Langchain Langchain-experimental versions
< 0.1.8, 0.0.61
Affected Langchain Langchain Core versions
< 0.3.81, 1.2.5, 0.3.84, 1.2.28, 1.2.11
Affected Langchain Langchain.js versions
< 0.3.37, 1.2.3
Affected Langchain Langchain\/core versions
< 0.3.80, 1.1.8
Affected Langchain Langchain Community versions
< 1.1.18, 1.1.14

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2025-2828
CVSS 10.0 CRITICAL 2025-06-23FIX AVAILABLE
CVE-2023-39631
CVSS 9.8 CRITICAL 2023-01-09FIX AVAILABLE
CVE-2026-27966 5 exploits
CVSS 9.8 CRITICAL 2026-02-26FIX AVAILABLE
CVE-2024-8309 2 exploits
CVSS 9.8 CRITICAL 2024-10-29
CVE-2024-27444
CVSS 9.8 CRITICAL 2024-02-25FIX AVAILABLE
CVE-2024-2057
CVSS 9.8 CRITICAL 2024-03-01FIX AVAILABLE
CVE-2023-39659
CVSS 9.8 CRITICAL 2023-08-15FIX AVAILABLE
CVE-2023-38896
CVSS 9.8 CRITICAL 2023-08-15FIX AVAILABLE
CVE-2023-38860
CVSS 9.8 CRITICAL 2023-08-15FIX AVAILABLE
CVE-2023-36281 2 exploits
CVSS 9.8 CRITICAL 2023-08-22FIX AVAILABLE
CVE-2023-36258
CVSS 9.8 CRITICAL 2023-07-03FIX AVAILABLE
CVE-2023-36188 1 exploit
CVSS 9.8 CRITICAL 2023-07-06FIX AVAILABLE
CVE-2023-36095
CVSS 9.8 CRITICAL 2023-08-05FIX AVAILABLE
CVE-2023-34541
CVSS 9.8 CRITICAL 2023-06-20FIX AVAILABLE
CVE-2023-34540
CVSS 9.8 CRITICAL 2023-06-14FIX AVAILABLE
CVE-2023-29374
CVSS 9.8 CRITICAL 2023-04-05
CVE-2025-68664 7 exploits
CVSS 9.3 CRITICAL 2025-12-23FIX AVAILABLE
CVE-2025-68665
CVSS 9.1 CRITICAL 2025-12-23FIX AVAILABLE
CVE-2024-3571
CVSS 8.8 HIGH 2024-04-15
CVE-2023-46229 2 exploits
CVSS 8.8 HIGH 2023-10-18FIX AVAILABLE
CVE-2024-58340
CVSS 8.7 HIGH 2026-01-12FIX AVAILABLE
CVE-2023-36189
CVSS 7.5 HIGH 2023-06-06FIX AVAILABLE
CVE-2024-5998
CVSS 7.8 HIGH 2024-09-17FIX AVAILABLE
CVE-2025-65106
CVSS 8.3 HIGH 2025-11-20FIX AVAILABLE
CVE-2026-44843
CVSS 8.2 HIGH 2026-05-08FIX AVAILABLE
CVE-2024-28088 1 exploit
CVSS 8.1 HIGH 2024-03-03FIX AVAILABLE
CVE-2024-0243
CVSS 8.1 HIGH 2024-02-24FIX AVAILABLE
CVE-2024-38459
CVSS 7.8 HIGH 2024-06-16FIX AVAILABLE
CVE-2023-32786
CVSS 7.5 HIGH 2023-10-20FIX AVAILABLE
CVE-2026-27795
CVSS 7.4 HIGH 2026-02-11FIX AVAILABLE
CVE-2024-1455
CVSS 5.9 MEDIUM 2024-03-26
CVE-2026-55443
CVSS 5.5 MEDIUM 2026-06-16FIX AVAILABLE
CVE-2026-40087
CVSS 5.3 MEDIUM 2026-04-08FIX AVAILABLE
CVE-2024-3095
CVSS 7.7 HIGH 2024-04-26FIX AVAILABLE
CVE-2024-2965
CVSS 4.7 MEDIUM 2024-06-06FIX AVAILABLE
CVE-2026-26019
CVSS 4.1 MEDIUM 2026-02-11FIX AVAILABLE
CVE-2026-26013
CVSS 3.7 LOW 2026-02-10FIX AVAILABLE