Quick answers
- Is CVE-2026-54769 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-54769 being exploited in the wild.
- How severe is CVE-2026-54769?
- Critical severity, with a CVSS score of 10, published 10 July 2026.
- Which products and versions are affected?
- langroid (PyPI) <= 0.65.1, ECOSYSTEM:introduced=0,fixed=0.65.2.
- Is there a fix for CVE-2026-54769?
- Yes. langroid (PyPI): upgrade to 0.65.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-54769 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-54769?
- Check whether you run langroid (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- langroid (PyPI): upgrade to 0.65.2 or later
pip install "langroid>=0.65.2"
Technical details
A sandbox escape vulnerability exists in Langroid's `TableChatAgent` and `VectorStore` components when `full_eval=True` is enabled. The framework attempts to sandbox LLM-generated tool messages by passing an empty dictionary to the `locals` parameter of Python's `eval()` function; however, it fails to scrub `__builtins__` from the `globals` dictionary. This allows an attacker to use prompt injection to trigger a tool call that accesses restricted functions like `__import__('os').system()`. An unauthenticated remote attacker can achieve full code execution on the host system by providing a malicious prompt payload. The issue is addressed in version 0.65.2.
Affected products
- langroid langroid < 0.65.2
Identifiers
- CVE-2026-54769
- GHSA-q9p7-wqxg-mrhc
- PYSEC-2026-2581
Timeline
- 2026-06-09: advisory: GitHub advisory published by maintainers
- 2026-07-09: disclosed: NVD publication date
- 2026-07-10: patched: Fix available in version 0.65.2