7.1

CVE-2026-45134: langchain-ai langsmith-sdk Deserialization of Untrusted Data

CVSS: 7.1v3.1HighAwaiting analysis
AliasesGHSA-3644-q5cj-c5c7PYSEC-2026-2555PYSEC-2026-2560
Published 27-05-2026Last modified 02-06-2026
Open JSON

Vulnerability summary

CVE-2026-45134 is a high (CVSS 7.1) Deserialization of Untrusted Data vulnerability in langchain-ai langsmith-sdk. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.4% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (CVE.org)
EPSS score
0.34%
0%100%
Low · +0.14 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 2
OPENSUSE-SU-2026:11284-1CGA-M9MV-HV49-VW59

Timeline

  1. 27-05-2026
    PublishedVulnerability first disclosed.
  2. 02-06-2026
    Last modifiedVulnerability information updated.

Description

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

0.34%

Chance of exploitation in the next 30 days

Percentile

26%

Versus all other CVEs

30-day change

+0.14 pp

From 0.20% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard26 products
  • kibana-8.17< 8.17.10-r22
  • kibana-8.17-bitnami< 8.17.10-r22
  • kibana-8.17-iamguarded< 8.17.10-r22
  • kibana-8.19< 8.19.15-r0
  • kibana-8.19-bitnami< 8.19.15-r0
PyPI3 products
  • langchain< 0.3.30
  • langchain-classic< 1.0.7
  • langsmith< 0.8.0
Wolfi3 products
  • langfuse-3< 3.174.1-r0
  • langfuse-3-worker< 3.174.1-r0
  • open-webui< 0.9.6-r1
Langchain-ai1 product
Npm1 product
  • langsmith< 0.6.0

5 vendors · 34 products

References

8 links