CVE-2024-28088

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)

• CWE-22
• CWE-31

• https://github.com/PinkDraconian/PoC-Langchain-RCE/blob/main/README.mdExploit, Third Party Advisory
• https://github.com/langchain-ai/langchain/blob/f96dd57501131840b713ed7c2e86cbf1ddc2761f/libs/core/langchain_core/utils/loading.pyProduct, Third Party Advisory
• https://github.com/langchain-ai/langchain/pull/18600Exploit, Issue Tracking, Patch
• https://github.com/PinkDraconian/PoC-Langchain-RCE/blob/main/README.mdExploit, Third Party Advisory
• https://github.com/langchain-ai/langchain/blob/f96dd57501131840b713ed7c2e86cbf1ddc2761f/libs/core/langchain_core/utils/loading.pyProduct, Third Party Advisory
• https://github.com/langchain-ai/langchain/pull/18600Exploit, Issue Tracking, Patch

Published

Mar 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28076The SolarWinds Platform was susceptible to a Arbitrary Open …3.8
• CVE-2024-28077A denial-of-service issue was discovered on certain GL-iNet …7.5
• CVE-2024-2808A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-28084p2putil.c in iNet wireless daemon (IWD) through 2.15 allows …7.5
• CVE-2024-28085wall in util-linux through 2.40, often installed with setgid…3.3
• CVE-2024-28087In Bonitasoft runtime Community edition, the lack of dynamic…6.5
• CVE-2024-28089Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a …5.2
• CVE-2024-2809A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-28090Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RS…5.4
• CVE-2024-28091Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RS…6.1
• CVE-2024-28092UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 …7.2
• CVE-2024-28093The TELNET service of AdTran NetVanta 3120 18.01.01.00.E dev…8.8