LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChains dumps() and dumpd() functions. The functions do not escape dictionaries with lc keys when serializing free-form dictionaries. The lc key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
Weakness
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Langchain_core | Langchain | * | 0.3.81 (excluding) |
| Langchain_core | Langchain | 1.0.0 (including) | 1.2.5 (excluding) |
| Red Hat Ansible Automation Platform 2.4 | RedHat | ansible-automation-platform-24/lightspeed-rhel8:sha256:0bb8228df7b60eb4bb4380fab098600ce5016702ca28972f5f94849bb87754d4 | * |
| Red Hat Ansible Automation Platform 2.5 | RedHat | ansible-automation-platform-25/lightspeed-chatbot-rhel8:sha256:49c8b12b5bf512bec9505f14b3bc10c9fb83de61315685cf837625a25e403644 | * |
| Red Hat Ansible Automation Platform 2.5 | RedHat | ansible-automation-platform-25/lightspeed-rhel8:sha256:e6c22160bf1ff6a6b4bd8c1ec2c5f2a35d3eafe7eba813574f05565aa4132e34 | * |
| Red Hat Ansible Automation Platform 2.6 | RedHat | ansible-automation-platform-26/lightspeed-rhel9:sha256:5c3edace72ef307d1ae7b36a3418dfca5e37087bfaf4252be49ffdf120205163 | * |
Potential Mitigations
- Make fields transient to protect them from deserialization.
- An attempt to serialize and then deserialize a class containing transient fields will result in NULLs where the transient data should be. This is an excellent way to prevent time, environment-based, or sensitive variables from being carried over and used improperly.
Related Attack Patterns
References
- https://github.com/langchain-ai/langchain/commit/5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8
- https://github.com/langchain-ai/langchain/commit/d9ec4c5cc78960abd37da79b0250f5642e6f0ce6
- https://github.com/langchain-ai/langchain/pull/34455
- https://github.com/langchain-ai/langchain/pull/34458
- https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D0.3.81
- https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.5
- https://github.com/langchain-ai/langchain/security/advisories/GHSA-c67j-w6g6-q2cm
- https://github.com/langchain-ai/langchain/security/advisories/GHSA-c67j-w6g6-q2cm