CVE-2026-25879

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by prompt injection. When configured with a database role that has privileges enabling code execution or filesystem access (e.g., PostgreSQL pg_execute_server_program, MySQL FILE, MSSQL xp_cmdshell), an attacker who can shape the agent's input — including indirectly via data returned to the LLM — can coerce execution of dialect-specific primitives such as `COPY ... FROM PROGRAM`, achieving RCE on the database host. Fixed in v0.63.0 by defaulting SQLChatAgent to a SELECT-only sqlglot-parsed statement allowlist with a dialect-aware dangerous-pattern blocklist; allow_dangerous_operations=True restores the previous unrestricted behavior for trusted deployments.

• CWE-89
• CWE-94

• https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq
• https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq

Published

Jun 1, 2026

Last Modified

Jul 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25873OmniGen2-RL contains an unauthenticated remote code executio…9.8
• CVE-2026-25874LeRobot through 0.5.1 contains an unsafe deserialization vul…9.8
• CVE-2026-25875PlaciPy is a placement management system designed for educat…9.8
• CVE-2026-25876PlaciPy is a placement management system designed for educat…9.1
• CVE-2026-25877Chartbrew is an open-source web application that can connect…6.5
• CVE-2026-25878FroshAdminer is the Adminer plugin for Shopware Platform. Pr…5.3
• CVE-2026-2588Crypt::NaCl::Sodium versions through 2.001 for Perl has an i…9.1
• CVE-2026-25880SumatraPDF is a multi-format reader for Windows. In 3.5.2 an…7.8
• CVE-2026-25881SandboxJS is a JavaScript sandboxing library. Prior to 0.8.3…10
• CVE-2026-25882Fiber is an Express inspired web framework written in Go. A …7.5
• CVE-2026-25883Vexa is an open-source, self-hostable meeting bot API and me…5.8
• CVE-2026-25884Exiv2 is a C++ library and a command-line utility to read, w…8.1