ZDI-26-135
HIGH 8.1
Published
Mar 03, 2026
LangChain LangGraph BaseCache Deserialization of Untrusted Data Remote Code Execution Vulnerability
LangChain
LangChain's LangGraph component contains a remote code execution vulnerability (CVE-2026-27794) that allows unauthenticated attackers to execute arbitrary code on affected systems, rated as HIGH severity with a CVSS score of 8.1. An attacker can exploit this flaw without credentials to gain full control over the targeted installation. Security teams should immediately patch LangGraph installations and review systems running this component for signs of unauthorized access or malicious activity.