CVE-2026-54760

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the `SQLChatAgent` SQL-injection mitigation, with default `allow_dangerous_operations=False`, combines a raw-text regex blocklist (`_DANGEROUS_SQL_PATTERNS`) with a `sqlglot` SELECT-only statement allowlist. The blocklist entries that target callable functions require the function name to be immediately followed by `\s*\(`. PostgreSQL accepts the same call with the name separated from `(` by a quoted identifier, an inline comment, or schema qualification. These forms evade the regex, still parse as `SELECT`, and execute the same PostgreSQL function. This restores the `pg_read_file` server-side file-read primitive that the prior CVE-2026-25879 / GHSA-pmch-g965-grmr fix was meant to block: the parent advisory fixed a missing `pg_read_file` blocklist entry, while this report shows that the added regex is bypassable. Version 0.65.1 fixes the issue.

• CWE-22
• CWE-89

• https://github.com/langroid/langroid/security/advisories/GHSA-6xc5-4r68-67fc
• https://github.com/langroid/langroid/security/advisories/GHSA-6xc5-4r68-67fc

Published

Jul 10, 2026

Last Modified

Jul 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5474A vulnerability was found in NASA cFS up to 7.0.0. This affe…8.8
• CVE-2026-5475A vulnerability was determined in NASA cFS up to 7.0.0. This…5.5
• CVE-2026-54753Nx is a monorepo solution for TypeScript and polyglot codeba…5.9
• CVE-2026-54756Jodit Editor is a WYSIWYG editor with written in pure TypeSc…6.3
• CVE-2026-54759SiYuan is an open-source personal knowledge management syste…8.7
• CVE-2026-5476A vulnerability was identified in NASA cFS up to 7.0.0 on 32…4.6
• CVE-2026-54761Traefik is an HTTP reverse proxy and load balancer. Prior to…7.1
• CVE-2026-54762Traefik is an HTTP reverse proxy and load balancer. From 3.7…8.6
• CVE-2026-54763Traefik is an HTTP reverse proxy and load balancer. Prior to…10
• CVE-2026-54764Traefik is an HTTP reverse proxy and load balancer. Prior to…5.8
• CVE-2026-54765Traefik is an open source HTTP reverse proxy and load balanc…8.5
• CVE-2026-54768WPGraphQL provides a GraphQL API for WordPress sites. From 2…6.9