Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3g6x-vq45-v2jv

Опубликовано: 29 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. This vulnerability allows attackers to execute arbitrary code and compromise the application via a crafted email message.

langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. This vulnerability allows attackers to execute arbitrary code and compromise the application via a crafted email message.

EPSS

Процентиль: 28%
0.00097
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.3
redhat
25 дней назад

langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. This vulnerability allows attackers to execute arbitrary code and compromise the application via a crafted email message. NOTE: this is disputed by the Supplier because the code-execution issue was introduced by user-written code that does not adhere to the LangChain security practices.

CVSS3: 9.8
nvd
24 дня назад

langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. This vulnerability allows attackers to execute arbitrary code and compromise the application via a crafted email message. NOTE: this is disputed by the Supplier because the code-execution issue was introduced by user-written code that does not adhere to the LangChain security practices.

EPSS

Процентиль: 28%
0.00097
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94