by Kastro
Paper/Archive/CVE-2025-9556

CVE-2025-9556

Langchaingo Langchaingo — CVE-2025-9556

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.9.529 × 2010.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a statement into a prompt to read the "etc/passwd" file.

Affected

ProductAffectedFixed inSource
Langchaingo0.1.14–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/tmc/langchaingo/security/advisories/GHSA-mgcj-g55g-rf6hrefgithub.com/tmc/langchaingo/pull/1348refkb.cert.org/vuls/id/949137