What is the CVSS score of CVE-2025-2828?

CVE-2025-2828 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Langchain are affected by CVE-2025-2828?

A critical remote code execution vulnerability in the langchain-community package (CVE-2025-2828) allows attackers to bypass network restrictions and access internal systems, cloud metadata, and…. A patch is available.

Is there a public PoC exploit available for CVE-2025-2828?

Yes, a public proof-of-concept exploit is available for CVE-2025-2828. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-2828?

Within 24 hours: Identify all systems running langchain-community version 0.0.27 and assess exposure in production environments. Within 7 days: Upgrade langchain-community to version 0.0.28 or later across all affected systems; conduct vulnerability scanning post-patch. Within 30 days: Perform forensic analysis of access logs for indicators of exploitation; review and strengthen API request filtering policies.

Langchain CVE-2025-2828

EUVD-2025-18953 CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2025-06-23 security@huntr.dev

GHSA-h5gc-rm8j-5gpr

Microsoft SSRF Langchain Red Hat AI / ML

10.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Red Hat

8.3 HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18953

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

Patch released

Mar 15, 2026 - 22:10 nvd

Patch available

PoC Detected

Jul 16, 2025 - 19:46 vuln.today

Public exploit code

CVE Published

Jun 23, 2025 - 21:15 nvd

CRITICAL 10.0

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

7 pypi packages depend on langchain-community (7 direct, 0 indirect)

Ecosystem-wide dependent count for version 0.0.28.

DescriptionCVE.org

A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does not enforce restrictions on requests to remote internet addresses, allowing it to also access local addresses. As a result, an attacker could exploit this flaw to perform port scans, access local services, retrieve instance metadata from cloud environments (e.g., Azure, AWS), and interact with servers on the local network. This issue has been fixed in version 0.0.28.