CVE-2024-8309
Medium · 4.9Langchain SQL Injection vulnerability
CVSS
4.9
EPSS
13.7%
Published
Oct 29, 2024
CISA due date
—
The record
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | langchain | 0 | c2a3021bb0c5f54649d380b42a0684ca5778c255 |
| PyPI | langchain | 0 | 0.2.0 |
| PyPI | langchain-community | 0.2.0 | 0.3.0 |
| PyPI | langchain-community | 0.2.0 | 0.2.19 |
| pypi | langchain-community | 0.2.0 | No fix |
Related vulnerabilities
- CVE-2026-45134 LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Also affects langchain
- GHSA-3644-q5cj-c5c7 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary… Also affects langchain
- CVE-2025-2828 LangChain Community SSRF vulnerability exists in RequestsToolkit component Also affects langchain-community
- CVE-2026-87936 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
- CVE-2026-87938 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
- CVE-2026-114664 Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the… CWE-89
- CVE-2026-114577 A vulnerability was found in oretnom23 php-travel-agency-system. CWE-89
- CVE-2026-113406 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. CWE-89