HIGHPyPI
GHSA-22c2-9gwg-mj59· CVE-2025-46725, PYSEC-2026-1531Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store
Modified: 7/7/2026
package
PyPI/langroid
pkg:pypi/langroid
CRITICALPyPI
GHSA-2pq5-3q89-j7cc· CVE-2026-55615, PYSEC-2026-2576Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
Modified: 7/13/2026
CRITICALPyPI
GHSA-6xc5-4r68-67fc· CVE-2026-54760, PYSEC-2026-2577Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-fg23-3346-88f5· CVE-2026-50181, PYSEC-2026-2578Langroid: Path traversal in the file tools allows read/write outside configured current directory
Modified: 7/13/2026
HIGH8.1PyPI
GHSA-gjgq-w2m6-wr5q· CVE-2026-54771, PYSEC-2026-2579Langroid: handle_message() executes user-supplied tool JSON without sender verification
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-jqq5-wc57-f8hj· CVE-2025-46724, PYSEC-2026-381Langroid has a Code Injection vulnerability in TableChatAgent
Modified: 7/1/2026
CRITICAL9.8PyPI
GHSA-mxfr-6hcw-j9rq· CVE-2026-25879, PYSEC-2026-382Langroid has Prompt to SQL Injection, Leading to RCE
Modified: 7/1/2026
HIGHPyPI
GHSA-pmch-g965-grmr· CVE-2026-50180, PYSEC-2026-2580Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Modified: 7/13/2026
HIGHPyPI
GHSA-pw95-88fg-3j6f· CVE-2025-46726, PYSEC-2026-1532Langroid Allows XXE Injection via XMLToolMessage
Modified: 7/7/2026
CRITICAL10.0PyPI
GHSA-q9p7-wqxg-mrhc· CVE-2026-54769, PYSEC-2026-2581Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent
Modified: 7/13/2026
CRITICALPyPI
GHSA-x34r-63hx-w57f· CVE-2026-25481, PYSEC-2026-383Langroid has WAF Bypass Leading to RCE in TableChatAgent
Modified: 7/1/2026
—PyPI
PYSEC-2026-1531· CVE-2025-46725, GHSA-22c2-9gwg-mj59Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store
Modified: 7/7/2026
—PyPI
PYSEC-2026-1532· CVE-2025-46726, GHSA-pw95-88fg-3j6fLangroid Allows XXE Injection via XMLToolMessage
Modified: 7/7/2026
—PyPI
PYSEC-2026-2576· CVE-2026-55615, GHSA-2pq5-3q89-j7ccLangroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
Modified: 7/13/2026
—PyPI
PYSEC-2026-2577· CVE-2026-54760, GHSA-6xc5-4r68-67fcLangroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls
Modified: 7/13/2026
HIGH7.1PyPI
PYSEC-2026-2578· CVE-2026-50181, GHSA-fg23-3346-88f5Langroid: Path traversal in the file tools allows read/write outside configured current directory
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-2579· CVE-2026-54771, GHSA-gjgq-w2m6-wr5qLangroid: handle_message() executes user-supplied tool JSON without sender verification
Modified: 7/13/2026
—PyPI
PYSEC-2026-2580· CVE-2026-50180, GHSA-pmch-g965-grmrLangroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Modified: 7/13/2026
CRITICAL10.0PyPI
PYSEC-2026-2581· CVE-2026-54769, GHSA-q9p7-wqxg-mrhcLangroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-381· CVE-2025-46724, GHSA-jqq5-wc57-f8hjLangroid has a Code Injection vulnerability in TableChatAgent
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-382· CVE-2026-25879, GHSA-mxfr-6hcw-j9rqLangroid has Prompt to SQL Injection, Leading to RCE
Modified: 7/1/2026
—PyPI
PYSEC-2026-383· CVE-2026-25481, GHSA-x34r-63hx-w57fLangroid has WAF Bypass Leading to RCE in TableChatAgent
Modified: 7/13/2026