{"id":"CVE-2023-44467","published":"2023-10-09T00:00:00Z","modified":"2024-08-02T20:07:33Z","title":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.01039,"percentile":0.63996,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2025-08-20","exploitedFirstSeen":"2025-08-20","ransomware":false,"evidence":[{"url":"https://blog.securelayer7.net/ai-agent-frameworks/","date":"2025-08-20"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[],"references":[{"url":"https://github.com/langchain-ai/langchain/commit/4c97a10bd0d9385cfee234a63b5bd826a295e483","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"langchain-experimental","vulnerableRanges":["<=0.0.14","<0.0.15"],"patched":["0.0.15"],"from":["GHSA-gjjr-63x4-v8cq","PYSEC-2023-194"],"provenance":"source"}],"advisories":[{"id":"GHSA-gjjr-63x4-v8cq","url":"https://github.com/advisories/GHSA-gjjr-63x4-v8cq","severity":"CRITICAL","ecosystem":"PyPI","package":"langchain-experimental","vulnerableRanges":["<=0.0.14"],"patched":[],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-0109","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0109","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-10-09","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-44467","provenance":"source"},{"date":"2025-08-20","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://blog.securelayer7.net/ai-agent-frameworks/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":47.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 438 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":12.8,"detail":"percentile 0.6400"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-langchain-experimental-cve-2023-36258","parents":[{"from":"CVE-2023-36258","to":"CVE-2023-44467","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.","from":"CVE.org","in":"CVE-2023-44467"}]}],"children":[{"from":"CVE-2023-44467","to":"CVE-2024-27444","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__,…","from":"CVE.org","in":"CVE-2024-27444"},{"kind":"similar","provenance":"machine","score":0.52,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2023-44467","published":"2023-10-09","fixed":"0.0.15","kev":false},{"cve":"CVE-2024-21513","published":"2024-07-15","fixed":"0.0.21","kev":false,"link":{"from":"CVE-2023-44467","to":"CVE-2024-21513","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langchain-experimental","fromFixed":"0.0.15","toFixed":"0.0.21","daysApart":280}]}},{"cve":"CVE-2024-27444","published":"2024-02-26","fixed":"0.0.52","kev":false},{"cve":"CVE-2024-38459","published":"2024-06-16","fixed":"0.0.61","kev":false}],"package":"PyPI:langchain-experimental"}}