1. Home
  2. CVE Database
  3. CVE-2023-32786
HIGH · 7.5

CVE-2023-32786

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstr...

Vulnerability Description

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LangchainLangchain<= 0.0.155

Related Weaknesses (CWE)

CWE-74

References

FAQ

What is CVE-2023-32786?

CVE-2023-32786 is a vulnerability with a CVSS score of 7.5 (HIGH). In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstr...

How severe is CVE-2023-32786?

CVE-2023-32786 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-32786?

Check the references section above for vendor advisories and patch information. Affected products include: Langchain Langchain.