Skip to main content

Langroid

4 CVEs product

Monthly

CVE-2026-25481 Feb 04, 20:16 PyPI CRITICAL POC PATCH GHSA Act Now

Langroid LLM framework prior to 0.5 has a code injection vulnerability (CVSS 9.6) allowing attackers to execute arbitrary code through the AI agent system.

Code Injection AI / ML Langroid
NVD GitHub
CVSS 3.1
9.6
EPSS
0.1%
CVE-2025-46725 May 20, 18:15 PyPI HIGH PATCH This Month

Langroid is a Python framework to build large language model (LLM)-powered applications. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Code Injection Langroid
NVD GitHub
CVSS 4.0
8.1
EPSS
0.4%
CVE-2025-46724 May 20, 18:15 PyPI CRITICAL POC PATCH GHSA Act Now

Langroid is a Python framework to build large language model (LLM)-powered applications. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Python Code Injection Langroid
NVD GitHub
CVSS 3.1
9.8
EPSS
0.2%
CVE-2025-46726 May 05, 20:15 PyPI HIGH POC PATCH This Week

Langroid is a framework for building large-language-model-powered applications. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XXE Langroid
NVD GitHub
CVSS 4.0
7.8
EPSS
0.4%
EPSS 0% CVSS 9.6
CRITICAL POC PATCH Act Now

Langroid LLM framework prior to 0.5 has a code injection vulnerability (CVSS 9.6) allowing attackers to execute arbitrary code through the AI agent system.

Code Injection AI / ML Langroid
NVD GitHub
EPSS 0% CVSS 8.1
HIGH PATCH This Month

Langroid is a Python framework to build large language model (LLM)-powered applications. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Code Injection +1
NVD GitHub
EPSS 0% CVSS 9.8
CRITICAL POC PATCH Act Now

Langroid is a Python framework to build large language model (LLM)-powered applications. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Python Code Injection +1
NVD GitHub
EPSS 0% CVSS 7.8
HIGH POC PATCH This Week

Langroid is a framework for building large-language-model-powered applications. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XXE Langroid
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy