Cloudanix VulnDB

CVE-2025-68664

Critical · 9.3

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

CVSS

9.3

EPSS

42.9%

Published

Dec 23, 2025

CISA due date

—

The record

A serialization injection vulnerability exists in LangChain's `dumps()` and `dumpd()` functions. The functions do not escape dictionaries with `'lc'` keys when serializing free-form dictionaries. The `'lc'` key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data.

Affected packages

Ecosystem Package Introduced Fixed
PyPI langchain-core 0 0.3.81
PyPI langchain-core 1.0.0 1.2.5
Chainguard py3-langchain 0 1.2.6-r0
Chainguard py3.10-langchain 0 1.2.6-r0
Chainguard py3.11-langchain 0 1.2.6-r0
Chainguard py3.12-langchain 0 1.2.6-r0
Chainguard py3.13-langchain 0 1.2.6-r0
Wolfi py3-langchain 0 1.2.6-r0
Wolfi py3.10-langchain 0 1.2.6-r0
Wolfi py3.11-langchain 0 1.2.6-r0
Wolfi py3.12-langchain 0 1.2.6-r0
Wolfi py3.13-langchain 0 1.2.6-r0
pypi langchain-core 1.0.0 No fix

Related vulnerabilities