Executive brief
LangChain Experimental Eval Injection vulnerability
Affected products
- PyPI langchain-experimental
Junglewise Threat Intelligence
CVE-2024-46946: PYSEC-2026-374 - LangChain Experimental Eval Injection vulnerability
CVE-2024-46946 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: langchain-experimental (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-375 - LangChain Experimental vulnerable to arbitrary code execution
- PYSEC-2024-62 - Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving valu
- PYSEC-2024-53 - langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; th
- PYSEC-2023-194 - langchain_experimental 0.0.14 allows an attacker to bypass the fix and execute arbitrary code via the PALChain in the python