Langchain4J
Monthly
Deserialization of untrusted data in the LangChain4j-agentic module's AgenticScopeSerializer.fromJson path allows an attacker who can already write to an AgenticScope persistence store to trigger arbitrary class instantiation through Jackson's insecure default typing. Affected versions are the 1.5.3, 1.11.10 and 1.18.1 beta lines up to and including 1.5.3-beta10, 1.11.10-beta18 and 1.18.1-beta27, with fixes released in 1.5.3-beta11, 1.11.10-beta19 and 1.18.1-beta28 under advisory GHSA-gmwr-7wmf-mrjm. Publicly available exploit code exists, but effective risk is low: exploitation requires that the application have explicitly enabled AgenticScope persistence (opt-in and off by default) and that the attacker already control the writable backing store, with attack complexity rated high; this issue is not confirmed actively exploited (not in CISA KEV), and EPSS-style scoring is negligible given the reported CVSS base of 2.1.
Deserialization of untrusted data in the LangChain4j-agentic module's AgenticScopeSerializer.fromJson path allows an attacker who can already write to an AgenticScope persistence store to trigger arbitrary class instantiation through Jackson's insecure default typing. Affected versions are the 1.5.3, 1.11.10 and 1.18.1 beta lines up to and including 1.5.3-beta10, 1.11.10-beta18 and 1.18.1-beta27, with fixes released in 1.5.3-beta11, 1.11.10-beta19 and 1.18.1-beta28 under advisory GHSA-gmwr-7wmf-mrjm. Publicly available exploit code exists, but effective risk is low: exploitation requires that the application have explicitly enabled AgenticScope persistence (opt-in and off by default) and that the attacker already control the writable backing store, with attack complexity rated high; this issue is not confirmed actively exploited (not in CISA KEV), and EPSS-style scoring is negligible given the reported CVSS base of 2.1.