CVE-2026-105799

LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker's intended scope. This issue is fixed in version 1.1.1.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-943"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105799.json"
}

References

Affected packages

Git / github.com/langchain-ai/langchainjs

Affected ranges

Type

GIT

Repo

https://github.com/langchain-ai/langchainjs

Events

Introduced

Fixed

862da5008f5278ac8a82d1fe383df975b83bad59

Fixed

880e3969ea643a2147777a4d5e8bd606a697edf7

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.1.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "fixed":  "880e3969ea643a2147777a4d5e8bd606a697edf7"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

0.*

0.0.100

0.0.101

0.0.102

0.0.103

0.0.104

0.0.105

0.0.106

0.0.107

0.0.108

0.0.109

0.0.110

0.0.111

0.0.112

0.0.113

0.0.114

0.0.115

0.0.116

0.0.117

0.0.118

0.0.119

0.0.120

0.0.121

0.0.122

0.0.123

0.0.124

0.0.125

0.0.126

0.0.127

0.0.128

0.0.129

0.0.130

0.0.131

0.0.132

0.0.133

0.0.134

0.0.135

0.0.136

0.0.137

0.0.138

0.0.139

0.0.140

0.0.141

0.0.143

0.0.144

0.0.145

0.0.146

0.0.147

0.0.148

0.0.149

0.0.150

0.0.151

0.0.152

0.0.153

0.0.154

0.0.155

0.0.156

0.0.157

0.0.158

0.0.159

0.0.160

0.0.161

0.0.162

0.0.163

0.0.164

0.0.165

0.0.166

0.0.167

0.0.168

0.0.169

0.0.170

0.0.171

0.0.172

0.0.173

0.0.174

0.0.175

0.0.176

0.0.177

0.0.178

0.0.179

0.0.180

0.0.181

0.0.182

0.0.183

0.0.184

0.0.185

0.0.186

0.0.187

0.0.188

0.0.189

0.0.190

0.0.191

0.0.192

0.0.193

0.0.194

0.0.195

0.0.196

0.0.197

0.0.198

0.0.199

0.0.200

0.0.201

0.0.202

0.0.203

0.0.204

0.0.205

0.0.206

0.0.207

0.0.208

0.0.209

0.0.210

0.0.211

0.0.212

0.0.213

0.0.214

0.0.83

0.0.84

0.0.85

0.0.86

0.0.87

0.0.88

0.0.89

0.0.90

0.0.91

0.0.92

0.0.97

0.0.98

0.1.0

0.1.1

0.1.10

0.1.11

0.1.12

0.1.13

0.1.14

0.1.15

0.1.16

0.1.18

0.1.19

0.1.2

0.1.20

0.1.21

0.1.22

0.1.26

0.1.27

0.1.28

0.1.29

0.1.3

0.1.30

0.1.31

0.1.32

0.1.33

0.1.34

0.1.35

0.1.36

0.1.4

0.1.5

0.1.6

0.1.7

0.1.8

0.1.9

0.2.0@next

0.2.1

0.2.10

0.2.11

0.2.13

0.2.14

0.2.15

0.2.16

0.2.18

0.2.19

0.2.2

0.2.3

0.2.4

0.2.5

0.2.6

0.2.7

0.2.8

0.2.9

0.3.0

0.3.1

0.3.19

0.3.2

0.3.23

0.3.24

0.3.5

0.3.54

@langchain/anthropic==0.*

@langchain/anthropic==0.3.25

@langchain/anthropic==0.3.27

@langchain/anthropic==0.3.28

@langchain/anthropic==0.3.29

@langchain/anthropic==1.*

@langchain/anthropic==1.0.0

@langchain/anthropic@1.*

@langchain/anthropic@1.1.0

@langchain/anthropic@1.1.1

@langchain/aws==0.*

@langchain/aws==0.1.15

@langchain/aws==1.*

@langchain/aws==1.0.0

@langchain/aws==1.0.1

@langchain/aws@1.*

@langchain/aws@1.0.2

@langchain/azure-cosmosdb==0.*

@langchain/azure-cosmosdb==0.2.10

@langchain/azure-cosmosdb==0.2.9

@langchain/azure-cosmosdb==1.*

@langchain/azure-cosmosdb==1.0.0

@langchain/azure-cosmosdb@1.*

@langchain/azure-cosmosdb@1.1.0

@langchain/azure-dynamic-sessions==1.*

@langchain/azure-dynamic-sessions==1.0.0

@langchain/azure-dynamic-sessions@1.*

@langchain/azure-dynamic-sessions@1.0.1

@langchain/baidu-qianfan==1.*

@langchain/baidu-qianfan==1.0.0

@langchain/baidu-qianfan@1.*

@langchain/baidu-qianfan@1.0.1

@langchain/cerebras==0.*

@langchain/cerebras==0.0.4

@langchain/cerebras==1.*

@langchain/cerebras==1.0.0

@langchain/cerebras@1.*

@langchain/cerebras@1.0.1

@langchain/classic==1.*

@langchain/classic==1.0.0

@langchain/classic==1.0.1

@langchain/classic==1.0.2

@langchain/classic@1.*

@langchain/classic@1.0.4

@langchain/cloudflare==0.*

@langchain/cloudflare==0.1.1

@langchain/cloudflare==0.1.2

@langchain/cloudflare==1.*

@langchain/cloudflare==1.0.0

@langchain/cloudflare@1.*

@langchain/cloudflare@1.0.1

@langchain/cohere==1.*

@langchain/cohere==1.0.0

@langchain/cohere@1.*

@langchain/cohere@1.0.1

@langchain/community==0.*

@langchain/community==0.3.54

@langchain/community==0.3.55

@langchain/community==0.3.56

@langchain/community==0.3.57

@langchain/community==1.*

@langchain/community==1.0.0

@langchain/community==1.0.1

@langchain/community==1.0.2

@langchain/community@1.*

@langchain/community@1.0.4

@langchain/core-0.*

@langchain/core-0.3.22

@langchain/core==0.*

@langchain/core==0.3.49

@langchain/core==0.3.59

@langchain/core==0.3.64

@langchain/core==0.3.68

@langchain/core==0.3.69

@langchain/core==0.3.70

@langchain/core==0.3.73

@langchain/core==0.3.74

@langchain/core==0.3.75

@langchain/core==0.3.76

@langchain/core==0.3.77

@langchain/core==0.3.78

@langchain/core==1.*

@langchain/core==1.0.0

@langchain/core==1.0.1

@langchain/core==1.0.2

@langchain/core==1.0.3

@langchain/core==1.0.4

@langchain/deepseek==1.*

@langchain/deepseek==1.0.0

@langchain/deepseek@1.*

@langchain/deepseek@1.0.2

@langchain/exa==1.*

@langchain/exa==1.0.0

@langchain/exa@1.*

@langchain/exa@1.0.1

@langchain/google-cloud-sql-pg==0.*

@langchain/google-cloud-sql-pg==0.0.2

@langchain/google-cloud-sql-pg==1.*

@langchain/google-cloud-sql-pg==1.0.0

@langchain/google-cloud-sql-pg@1.*

@langchain/google-cloud-sql-pg@1.0.1

@langchain/google-common==0.*

@langchain/google-common==0.2.17

@langchain/google-common==0.2.18

@langchain/google-common==1.*

@langchain/google-common==1.0.0

@langchain/google-common@1.*

@langchain/google-common@1.0.2

@langchain/google-common@1.0.3

@langchain/google-common@1.0.4

@langchain/google-gauth==0.*

@langchain/google-gauth==0.2.17

@langchain/google-gauth==0.2.18

@langchain/google-gauth==1.*

@langchain/google-gauth==1.0.0

@langchain/google-gauth@1.*

@langchain/google-gauth@1.0.2

@langchain/google-gauth@1.0.3

@langchain/google-gauth@1.0.4

@langchain/google-genai==0.*

@langchain/google-genai==0.2.17

@langchain/google-genai==0.2.18

@langchain/google-genai==1.*

@langchain/google-genai==1.0.0

@langchain/google-genai@1.*

@langchain/google-genai@1.0.2

@langchain/google-genai@1.0.3

Other

@langchain/google-vertexai

v1-head

@langchain/google-vertexai-web==0.*

@langchain/google-vertexai-web==0.2.17

@langchain/google-vertexai-web==0.2.18

@langchain/google-vertexai-web@1.*

@langchain/google-vertexai-web@1.0.2

@langchain/google-vertexai-web@1.0.3

@langchain/google-vertexai-web@1.0.4

@langchain/google-vertexai==0.*

@langchain/google-vertexai==0.2.17

@langchain/google-vertexai==0.2.18

@langchain/google-vertexai@1.*

@langchain/google-vertexai@1.0.2

@langchain/google-vertexai@1.0.3

@langchain/google-vertexai@1.0.4

@langchain/google-webauth==0.*

@langchain/google-webauth==0.2.17

@langchain/google-webauth==0.2.18

@langchain/google-webauth==1.*

@langchain/google-webauth==1.0.0

@langchain/google-webauth@1.*

@langchain/google-webauth@1.0.2

@langchain/google-webauth@1.0.3

@langchain/google-webauth@1.0.4

@langchain/groq==0.*

@langchain/groq==0.2.4

@langchain/groq==1.*

@langchain/groq==1.0.0

@langchain/groq@1.*

@langchain/groq@1.0.2

@langchain/mcp-adapters==1.*

@langchain/mcp-adapters==1.0.0

@langchain/mcp-adapters@1.*

@langchain/mcp-adapters@1.0.1

@langchain/mistralai==0.*

@langchain/mistralai==0.2.2

@langchain/mistralai==1.*

@langchain/mistralai==1.0.0

@langchain/mistralai@1.*

@langchain/mistralai@1.0.1

@langchain/mixedbread-ai==1.*

@langchain/mixedbread-ai==1.0.0

@langchain/mixedbread-ai@1.*

@langchain/mixedbread-ai@1.0.1

@langchain/mongodb==1.*

@langchain/mongodb==1.0.0

@langchain/mongodb@1.*

@langchain/mongodb@1.0.1

@langchain/nomic==1.*

@langchain/nomic==1.0.0

@langchain/nomic@1.*

@langchain/nomic@1.0.1

@langchain/ollama==0.*

@langchain/ollama==0.2.4

@langchain/ollama==1.*

@langchain/ollama==1.0.0

@langchain/ollama==1.0.1

@langchain/ollama@1.*

@langchain/ollama@1.0.2

@langchain/openai==0.*

@langchain/openai==0.5.17

@langchain/openai==0.6.10

@langchain/openai==0.6.12

@langchain/openai==0.6.14

@langchain/openai==0.6.5

@langchain/openai==0.6.6

@langchain/openai==1.*

@langchain/openai==1.0.0

@langchain/openai==1.1.0

@langchain/openai@1.*

@langchain/openai@1.1.2

@langchain/pinecone==1.*

@langchain/pinecone==1.0.0

@langchain/pinecone@1.*

@langchain/pinecone@1.0.1

@langchain/qdrant==1.*

@langchain/qdrant==1.0.0

@langchain/qdrant@1.*

@langchain/qdrant@1.0.1

@langchain/redis==0.*

@langchain/redis==0.1.2

@langchain/redis==0.1.3

@langchain/redis==1.*

@langchain/redis==1.0.0

@langchain/redis@1.*

@langchain/redis@1.0.1

@langchain/tavily==1.*

@langchain/tavily==1.0.0

@langchain/tavily@1.*

@langchain/tavily@1.0.1

@langchain/textsplitters==1.*

@langchain/textsplitters==1.0.0

@langchain/textsplitters@1.*

@langchain/textsplitters@1.0.1

@langchain/vertexai-web==1.*

@langchain/vertexai-web==1.0.0

@langchain/vertexai==1.*

@langchain/vertexai==1.0.0

@langchain/weaviate==0.*

@langchain/weaviate==0.2.3

@langchain/weaviate==1.*

@langchain/weaviate==1.0.0

@langchain/weaviate@1.*

@langchain/weaviate@1.0.1

@langchain/xai==1.*

@langchain/xai==1.0.0

@langchain/xai@1.*

@langchain/xai@1.0.2

@langchain/yandex==1.*

@langchain/yandex==1.0.0

@langchain/yandex@1.*

@langchain/yandex@1.0.1

langchain==0.*

langchain==0.3.22

langchain==0.3.32

langchain==0.3.33

langchain==0.3.34

langchain==0.3.35

langchain==1.*

langchain==1.0.0

langchain==1.0.1

langchain==1.0.2

langchain==1.0.3

langchain==1.0.4

langchain@1.*

langchain@1.0.5

langchain@1.0.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105799.json"