Login Request a demo
LA
Product
langroid
by langroid · last CVE Jul 9, 2026
11
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 8High 3Medium 0Low 0
Severity
All severities11Critical8High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add langroid to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54769
10.0
1%
Jul 9
Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent
Affected: < 0.65.2
CVE-2026-25879
9.8
1%
Jun 1
Langroid has Prompt to SQL Injection, Leading to RCE
Affected: < 0.63.0
CVE-2025-46725
9.8
1%
May 20
Langroid is a Python framework to build large language model (LLM)-powered applications
Affected: before 0.53.15
CVE-2025-46724
9.8
1%
May 20
Langroid is a Python framework to build large language model (LLM)-powered applications
Affected: before 0.53.15
CVE-2026-25481
9.6
1%
Feb 4
Langroid has WAF Bypass Leading to RCE in TableChatAgent
Affected: < 0.59.32
CVE-2026-54760
9.3
1%
Jul 9
Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
Affected: < 0.65.1
CVE-2026-55615
9.2
0%
Jul 9
Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
Affected: < 0.65.5
CVE-2025-46726
9.1
1%
May 5
Langroid is a framework for building large-language-model-powered applications
Affected: before 0.53.4
CVE-2026-50180
8.7
1%
Jul 9
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Affected: < 0.64.0
CVE-2026-54771
8.1
0%
Jul 9
Langroid: handle_message() executes user-supplied tool JSON without sender verification
Affected: < 0.65.3
CVE-2026-50181
7.1
0%
Jul 9
Langroid: Path traversal in the file tools allows read/write outside configured current directory
Affected: < 0.64.0
Showing 11