Low
osv
·
PYSEC-2026-372
Langchain SQL Injection vulnerability
Published Jun 29, 2026
CVSS 3.1
In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.
Affected AI Products
langchain