CVE-2026-44843
published 2026-05-26CVE-2026-44843: LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that…
PriorityP349high8.2CVSS 3.1
AVNACLPRNUINSUCHILAN
EPSS
0.41%
32.4th percentile
LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load() with allowed_objects="all". This does not enable arbitrary Python object deserialization, but it does allow any trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As a result, attacker-supplied LangChain serialized constructor dictionaries may cause trusted runtime paths to instantiate classes with untrusted constructor arguments. This vulnerability is fixed in 0.3.85 and 1.3.3.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| langchain-ai | langchain | < 0.3.85 | 0.3.85 |
| langchain-ai | langchain | — | — |
| langchain | langchain | < 0.3.85 | 0.3.85 |
| langchain | langchain | >= 1.0.0 < 1.3.3 | 1.3.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
langchain-ai langchain up to 0.3.84/1.3.2 load deserialization (GHSA-pjwx-r37v-7724)
vuldb·2026-05-26·CVSS 8.2
CVE-2026-44843 [HIGH] langchain-ai langchain up to 0.3.84/1.3.2 load deserialization (GHSA-pjwx-r37v-7724)
A vulnerability classified as critical was found in langchain-ai langchain up to 0.3.84/1.3.2. Affected by this issue is the function Load. Executing a manipulation can lead to deserialization.
This vulnerability is handled as CVE-2026-44843. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
GHSA
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
ghsa·2026-05-08
CVE-2026-44843 [HIGH] CWE-502 LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call `load()` with `allowed_objects="all"`. This does not enable arbitrary Python object deserialization, but it does allow any trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As a result, attacker-supplied LangChain serialized constructor dictionaries may cause trusted runtime paths to instantiate classes with untrusted constructor arguments.
Applications are exposed only when all of the following are true:
1. The application accepts un
No detection rules found.
No public exploits indexed.
2026-05-26
Published