CVE-2026-25528

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. The LangSmith SDK's distributed tracing feature is vulnerable to Server-Side Request Forgery via malicious HTTP headers. An attacker can inject arbitrary api_url values through the baggage header, causing the SDK to exfiltrate sensitive trace data to attacker-controlled endpoints. When using distributed tracing, the SDK parses incoming HTTP headers via RunTree.from_headers() in Python or RunTree.fromHeaders() in Typescript. The baggage header can contain replica configurations including api_url and api_key fields. Prior to the fix, these attacker-controlled values were accepted without validation. When a traced operation completes, the SDK's post() and patch() methods send run data to all configured replica URLs, including any injected by an attacker. This vulnerability is fixed in version 0.6.3 of the Python SDK and 0.4.6 of the JavaScript SDK.

• CWE-918

• https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-v34v-rq6j-cj6p

Published

Feb 9, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25522Craft Commerce is an ecommerce platform for Craft CMS. In ve…4.8
• CVE-2026-25523Magento-lts is a long-term support alternative to Magento Co…5.3
• CVE-2026-25524Magento Long Term Support (LTS) is an unofficial, community-…8.1
• CVE-2026-25525Magento Long Term Support (LTS) is an unofficial, community-…4.9
• CVE-2026-25526JinJava is a Java-based template engine based on django temp…9.8
• CVE-2026-25527changedetection.io is a free open source web page change det…5.3
• CVE-2026-25529Postal is an open source SMTP server. Postal versions less t…8.1
• CVE-2026-2553A security flaw has been discovered in tushar-2223 Hotel-Man…6.3
• CVE-2026-25530Kanboard is project management software focused on Kanban me…4.3
• CVE-2026-25531Kanboard is project management software focused on Kanban me…4.3
• CVE-2026-25532ESF-IDF is the Espressif Internet of Things (IOT) Developmen…8
• CVE-2026-25533Enclave is a secure JavaScript sandbox designed for safe AI …8.8