What is the CVSS score of CVE-2025-2828?

CVE-2025-2828 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Langchain are affected by CVE-2025-2828?

A critical remote code execution vulnerability in the langchain-community package (CVE-2025-2828) allows attackers to bypass network restrictions and access internal systems, cloud metadata, and…. A patch is available.

Is there a public PoC exploit available for CVE-2025-2828?

Yes, a public proof-of-concept exploit is available for CVE-2025-2828. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-2828?

Within 24 hours: Identify all systems running langchain-community version 0.0.27 and assess exposure in production environments. Within 7 days: Upgrade langchain-community to version 0.0.28 or later across all affected systems; conduct vulnerability scanning post-patch. Within 30 days: Perform forensic analysis of access logs for indicators of exploitation; review and strengthen API request filtering policies.

Langchain CVE-2025-2828

EUVD-2025-18953 CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2025-06-23 security@huntr.dev

GHSA-h5gc-rm8j-5gpr

Microsoft SSRF Langchain Red Hat AI / ML

10.0

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18953

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

Patch released

Mar 15, 2026 - 22:10 nvd

Patch available

PoC Detected

Jul 16, 2025 - 19:46 vuln.today

Public exploit code

CVE Published

Jun 23, 2025 - 21:15 nvd

CRITICAL 10.0

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

7 pypi packages depend on langchain-community (7 direct, 0 indirect)

Ecosystem-wide dependent count for version 0.0.28.

DescriptionNVD

A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does not enforce restrictions on requests to remote internet addresses, allowing it to also access local addresses. As a result, an attacker could exploit this flaw to perform port scans, access local services, retrieve instance metadata from cloud environments (e.g., Azure, AWS), and interact with servers on the local network. This issue has been fixed in version 0.0.28.

AnalysisAI

A remote code execution vulnerability in langchain-ai/langchain (CVSS 10.0). Risk factors: public PoC available. Vendor patch is available.

Technical ContextAI

CWE-918 (Server-Side Request Forgery). CVSS 10.0 indicates critical severity with likely remote exploitation vector. Affects langchain-ai/langchain.

RemediationAI

Apply the vendor-supplied patch immediately.

Vendor StatusVendor

CVE-2025-2828 vulnerability details – vuln.today

Back

Langchain CVE-2025-2828

CVSS VectorNVD

Lifecycle Timeline

Blast Radius

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Vendor StatusVendor

Share

External POC / Exploit Code