What is the CVSS score of CVE-2026-41488?

CVE-2026-41488 has a CVSS 3.1 base score of 3.1 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-41488?

Yes, a patch is available for CVE-2026-41488. Update the affected software to the latest version immediately.

Langchain Openai CVE-2026-41488

EUVD-2026-25635 LOW

Server-Side Request Forgery (SSRF) (CWE-918)

2026-04-24 GitHub_M

SSRF Langchain Openai

3.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

3.1 LOW

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Apr 28, 2026 - 18:17 nvd

Patch available

Apr 24, 2026 - 23:02 EUVD

EUVD ID Assigned

Apr 24, 2026 - 21:15 euvd

EUVD-2026-25635

CVE Published

Apr 24, 2026 - 20:57 nvd

LOW 3.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 pypi packages depend on langchain-openai (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 1.1.14.

DescriptionGitHub Advisory

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's _url_to_size() helper (used by get_num_tokens_from_messages for image token counting) validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled hostname could resolve to a public IP during validation and then to a private/localhost IP during the actual fetch.