Executive brief
langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.
Affected products
- PyPI langchain-experimental
Junglewise Threat Intelligence
CVE-2023-44467: PYSEC-2023-194 - langchain_experimental 0.0.14 allows an attacker to bypass the fix and execute arbitrary code via the PALChain in the python
CVE-2023-44467 · Severity: low · CVSS 3.1 · Published 2023-10-09
Technologies: langchain-experimental (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-374 - LangChain Experimental Eval Injection vulnerability
- PYSEC-2026-375 - LangChain Experimental vulnerable to arbitrary code execution
- PYSEC-2024-62 - Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving valu
- PYSEC-2024-53 - langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; th