ZDI-26-135 HIGH 8.1 Published Mar 03, 2026

LangChain LangGraph BaseCache Deserialization of Untrusted Data Remote Code Execution Vulnerability

LangChain

LangChain's LangGraph component contains a remote code execution vulnerability (CVE-2026-27794) that allows unauthenticated attackers to execute arbitrary code on affected systems, rated as HIGH severity with a CVSS score of 8.1. An attacker can exploit this flaw without credentials to gain full control over the targeted installation. Security teams should immediately patch LangGraph installations and review systems running this component for signs of unauthorized access or malicious activity.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy