← Retour aux CVEs
CVE-2023-36258
CRITICAL9.8
Description
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.
Details CVE
Score CVSS v3.19.8
SeveriteCRITICAL
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie7/3/2023
Derniere modification11/22/2024
Sourcenvd
Observations honeypot0
Produits affectes
langchain:langchain
Faiblesses (CWE)
CWE-94
References
https://github.com/hwchase17/langchain/issues/5872(cve@mitre.org)
https://github.com/hwchase17/langchain/issues/5872(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.