LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-502"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68664.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:langchain:langchain_core:*:*:*:*:*:python:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.3.81"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:langchain:langchain_core:*:*:*:*:*:python:*:*",
"range": [
{
"introduced": "1.0.0"
},
{
"fixed": "1.2.5"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "d9ec4c5cc78960abd37da79b0250f5642e6f0ce6"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "langchain-core==0.3.81",
"range": [
{
"fixed": "6dc06da1bb2f3781844895c259a67e40bc598f19"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "langchain-core==1.2.5",
"range": [
{
"fixed": "57279c7b817864282f810183f3287f807142dc3b"
}
],
"source": "REFERENCES_TAG"
}
]
}