Is CVE-2026-25481 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-25481 being exploited in the wild.

How severe is CVE-2026-25481?

Critical severity, with a CVSS score of 4, published 2 February 2026.

Which products and versions are affected?

langroid (PyPI) <= 0.59.31, ECOSYSTEM:introduced=0,fixed=0.59.32.

Is there a fix for CVE-2026-25481?

Yes. langroid (PyPI): upgrade to 0.59.32 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-25481 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-25481?

Check whether you run langroid (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-25481: Langroid RCE via WAF bypass in TableChatAgent

Q: Which products and versions are affected?

langroid (PyPI) <= 0.59.31, ECOSYSTEM:introduced=0,fixed=0.59.32.

Q: Is there a fix for CVE-2026-25481?

Yes. langroid (PyPI): upgrade to 0.59.32 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-25481 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-25481?

Check whether you run langroid (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-25481 · Severity: critical · CVSS 4 · Published 2026-02-02

Langroid, a framework for building LLM-based applications, contains a vulnerability in its data analysis component that allows attackers to execute arbitrary commands on the underlying server. By providing a specially crafted request to the TableChatAgent, an attacker can bypass security filters intended to block malicious code. This could lead to a full system compromise, unauthorized data access, or service disruption.

Technologies: langroid (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-25481 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-25481 being exploited in the wild.
How severe is CVE-2026-25481?: Critical severity, with a CVSS score of 4, published 2 February 2026.
Which products and versions are affected?: langroid (PyPI) <= 0.59.31, ECOSYSTEM:introduced=0,fixed=0.59.32.
Is there a fix for CVE-2026-25481?: Yes. langroid (PyPI): upgrade to 0.59.32 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-25481 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-25481?: Check whether you run langroid (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

langroid (PyPI): upgrade to 0.59.32 or later
```
pip install "langroid>=0.59.32"
```

Technical details

A Remote Code Execution (RCE) vulnerability exists in Langroid's TableChatAgent due to a bypass of the WAF implemented in `langroid/utils/pandas_utils.py`. The root cause is twofold: the `_literal_ok()` function returns `False` instead of raising an `UnsafeCommandError` on invalid input, and the system fails to restrict access to dangerous Python dunder attributes like `__init__`, `__globals__`, and `__builtins__`. An attacker can chain whitelisted DataFrame methods to access the `eval` builtin and execute arbitrary shell commands. This vulnerability is a bypass of the fix for CVE-2025-46724 and is tracked as CVE-2026-25481. A patch is available in version 0.59.32.

Affected products

langroid langroid <= 0.59.31

Identifiers

CVE-2026-25481
GHSA-x34r-63hx-w57f
PYSEC-2026-383

Timeline

2026-02-01: patched: Fixed in version 0.59.32
2026-02-02: advisory: GHSA-x34r-63hx-w57f published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.