CVE-2023-36258: Langchain

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.

Affected products

• Langchain Langchain: version 0.0.199 only

Published 2023-07-03. Last modified 2026-06-17.