CVE-2023-38860 | Severity.io

Description

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

Related CPE's

Vulnerable

References

ExploitIssue Tracking

ExploitIssue Tracking

Weaknesses

Primary

CWE-94

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

Vulnerability status

Modified

Published

2023-08-15T17:15:11.737Z

3 years ago

Last modified

2026-06-17T06:11:12.740Z

3 months ago