CVE-2025-68664: langchain-ai langchain Deserialization of Untrusted Data
Vulnerability summary
CVE-2025-68664 is a critical (CVSS 9.3) Deserialization of Untrusted Data vulnerability in langchain-ai langchain. EPSS estimates a 42.93% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 23-12-2025PublishedVulnerability first disclosed.
- 24-12-2025Last modifiedVulnerability information updated.
Description
LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · PypiEcosystem advisory · calculated9.3CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
- OSV · ChainguardEcosystem advisory · calculated9.3CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
- NVDNIST8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NDiffers
EPSS trend
Probability
42.93%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 42.93% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundLangchain
Maturity: poc
LangChain Core 1.2.4 - SSTI/RCE
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Chainguard5 products
- py3-langchain< 1.2.6-r0
- py3.10-langchain< 1.2.6-r0
- py3.11-langchain< 1.2.6-r0
- py3.12-langchain< 1.2.6-r0
- py3.13-langchain< 1.2.6-r0
Langchain1 product
- langchain_core< 0.3.81 | ≥ 1.0.0, < 1.2.5
Langchain-ai1 product
- langchain≥ 1.0.0, < 1.2.5 | < 0.3.81
PyPI1 product
- langchain-core< 0.3.81 | ≥ 1.0.0, < 1.2.5
4 vendors · 8 products
References
12 links- github.com/langchain-ai/langchain/security/advisories/GHSA-c67j-w6g6-q2cmX Refsource CONFIRMWEBAdvisoryExploitVendor Advisory
- github.com/langchain-ai/langchain/commit/5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8X Refsource MISCWEBFIXPatch
- github.com/langchain-ai/langchain/commit/d9ec4c5cc78960abd37da79b0250f5642e6f0ce6X Refsource MISCWEBFIXPatch
- github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D0.3.81X Refsource MISCWEBRelease Notes
- github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.5X Refsource MISCWEBRelease Notes
