CVE-2026-105799

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-105799
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105799.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-105799
Aliases
Published
2026-10-06T14:45:38Z
Modified
2026-10-07T02:47:30Z
Severity
  • 2.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
Details

LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker's intended scope. This issue is fixed in version 1.1.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-943"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105799.json"
}
References

Affected packages

Git / github.com/langchain-ai/langchainjs

Affected ranges

Type
GIT
Repo
https://github.com/langchain-ai/langchainjs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
862da5008f5278ac8a82d1fe383df975b83bad59
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.1.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.0.100
0.0.101
0.0.102
0.0.103
0.0.104
0.0.105
0.0.106
0.0.107
0.0.108
0.0.109
0.0.110
0.0.111
0.0.112
0.0.113
0.0.114
0.0.115
0.0.116
0.0.117
0.0.118
0.0.119
0.0.120
0.0.121
0.0.122
0.0.123
0.0.124
0.0.125
0.0.126
0.0.127
0.0.128
0.0.129
0.0.130
0.0.131
0.0.132
0.0.133
0.0.134
0.0.135
0.0.136
0.0.137
0.0.138
0.0.139
0.0.140
0.0.141
0.0.143
0.0.144
0.0.145
0.0.146
0.0.147
0.0.148
0.0.149
0.0.150
0.0.151
0.0.152
0.0.153
0.0.154
0.0.155
0.0.156
0.0.157
0.0.158
0.0.159
0.0.160
0.0.161
0.0.162
0.0.163
0.0.164
0.0.165
0.0.166
0.0.167
0.0.168
0.0.169
0.0.170
0.0.171
0.0.172
0.0.173
0.0.174
0.0.175
0.0.176
0.0.177
0.0.178
0.0.179
0.0.180
0.0.181
0.0.182
0.0.183
0.0.184
0.0.185
0.0.186
0.0.187
0.0.188
0.0.189
0.0.190
0.0.191
0.0.192
0.0.193
0.0.194
0.0.195
0.0.196
0.0.197
0.0.198
0.0.199
0.0.200
0.0.201
0.0.202
0.0.203
0.0.204
0.0.205
0.0.206
0.0.207
0.0.208
0.0.209
0.0.210
0.0.211
0.0.212
0.0.213
0.0.214
0.0.83
0.0.84
0.0.85
0.0.86
0.0.87
0.0.88
0.0.89
0.0.90
0.0.91
0.0.92
0.0.97
0.0.98
0.1.0
0.1.1
0.1.10
0.1.11
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.18
0.1.19
0.1.2
0.1.20
0.1.21
0.1.22
0.1.26
0.1.27
0.1.28
0.1.29
0.1.3
0.1.30
0.1.31
0.1.32
0.1.33
0.1.34
0.1.35
0.1.36
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0@next
0.2.1
0.2.10
0.2.11
0.2.13
0.2.14
0.2.15
0.2.16
0.2.18
0.2.19
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.1
0.3.19
0.3.2
0.3.23
0.3.24
0.3.5
0.3.54
@langchain/anthropic==0.*
@langchain/anthropic==0.3.25
@langchain/anthropic==0.3.27
@langchain/anthropic==0.3.28
@langchain/anthropic==0.3.29
@langchain/anthropic==1.*
@langchain/anthropic==1.0.0
@langchain/anthropic@1.*
@langchain/anthropic@1.1.0
@langchain/anthropic@1.1.1
@langchain/aws==0.*
@langchain/aws==0.1.15
@langchain/aws==1.*
@langchain/aws==1.0.0
@langchain/aws==1.0.1
@langchain/aws@1.*
@langchain/aws@1.0.2
@langchain/azure-cosmosdb==0.*
@langchain/azure-cosmosdb==0.2.10
@langchain/azure-cosmosdb==0.2.9
@langchain/azure-cosmosdb==1.*
@langchain/azure-cosmosdb==1.0.0
@langchain/azure-cosmosdb@1.*
@langchain/azure-cosmosdb@1.1.0
@langchain/azure-dynamic-sessions==1.*
@langchain/azure-dynamic-sessions==1.0.0
@langchain/azure-dynamic-sessions@1.*
@langchain/azure-dynamic-sessions@1.0.1
@langchain/baidu-qianfan==1.*
@langchain/baidu-qianfan==1.0.0
@langchain/baidu-qianfan@1.*
@langchain/baidu-qianfan@1.0.1
@langchain/cerebras==0.*
@langchain/cerebras==0.0.4
@langchain/cerebras==1.*
@langchain/cerebras==1.0.0
@langchain/cerebras@1.*
@langchain/cerebras@1.0.1
@langchain/classic==1.*
@langchain/classic==1.0.0
@langchain/classic==1.0.1
@langchain/classic==1.0.2
@langchain/classic@1.*
@langchain/classic@1.0.4
@langchain/cloudflare==0.*
@langchain/cloudflare==0.1.1
@langchain/cloudflare==0.1.2
@langchain/cloudflare==1.*
@langchain/cloudflare==1.0.0
@langchain/cloudflare@1.*
@langchain/cloudflare@1.0.1
@langchain/cohere==1.*
@langchain/cohere==1.0.0
@langchain/cohere@1.*
@langchain/cohere@1.0.1
@langchain/community==0.*
@langchain/community==0.3.54
@langchain/community==0.3.55
@langchain/community==0.3.56
@langchain/community==0.3.57
@langchain/community==1.*
@langchain/community==1.0.0
@langchain/community==1.0.1
@langchain/community==1.0.2
@langchain/community@1.*
@langchain/community@1.0.4
@langchain/core-0.*
@langchain/core-0.3.22
@langchain/core==0.*
@langchain/core==0.3.49
@langchain/core==0.3.59
@langchain/core==0.3.64
@langchain/core==0.3.68
@langchain/core==0.3.69
@langchain/core==0.3.70
@langchain/core==0.3.73
@langchain/core==0.3.74
@langchain/core==0.3.75
@langchain/core==0.3.76
@langchain/core==0.3.77
@langchain/core==0.3.78
@langchain/core==1.*
@langchain/core==1.0.0
@langchain/core==1.0.1
@langchain/core==1.0.2
@langchain/core==1.0.3
@langchain/core==1.0.4
@langchain/deepseek==1.*
@langchain/deepseek==1.0.0
@langchain/deepseek@1.*
@langchain/deepseek@1.0.2
@langchain/exa==1.*
@langchain/exa==1.0.0
@langchain/exa@1.*
@langchain/exa@1.0.1
@langchain/google-cloud-sql-pg==0.*
@langchain/google-cloud-sql-pg==0.0.2
@langchain/google-cloud-sql-pg==1.*
@langchain/google-cloud-sql-pg==1.0.0
@langchain/google-cloud-sql-pg@1.*
@langchain/google-cloud-sql-pg@1.0.1
@langchain/google-common==0.*
@langchain/google-common==0.2.17
@langchain/google-common==0.2.18
@langchain/google-common==1.*
@langchain/google-common==1.0.0
@langchain/google-common@1.*
@langchain/google-common@1.0.2
@langchain/google-common@1.0.3
@langchain/google-common@1.0.4
@langchain/google-gauth==0.*
@langchain/google-gauth==0.2.17
@langchain/google-gauth==0.2.18
@langchain/google-gauth==1.*
@langchain/google-gauth==1.0.0
@langchain/google-gauth@1.*
@langchain/google-gauth@1.0.2
@langchain/google-gauth@1.0.3
@langchain/google-gauth@1.0.4
@langchain/google-genai==0.*
@langchain/google-genai==0.2.17
@langchain/google-genai==0.2.18
@langchain/google-genai==1.*
@langchain/google-genai==1.0.0
@langchain/google-genai@1.*
@langchain/google-genai@1.0.2
@langchain/google-genai@1.0.3
Other
@langchain/google-vertexai
v1-head
@langchain/google-vertexai-web==0.*
@langchain/google-vertexai-web==0.2.17
@langchain/google-vertexai-web==0.2.18
@langchain/google-vertexai-web@1.*
@langchain/google-vertexai-web@1.0.2
@langchain/google-vertexai-web@1.0.3
@langchain/google-vertexai-web@1.0.4
@langchain/google-vertexai==0.*
@langchain/google-vertexai==0.2.17
@langchain/google-vertexai==0.2.18
@langchain/google-vertexai@1.*
@langchain/google-vertexai@1.0.2
@langchain/google-vertexai@1.0.3
@langchain/google-vertexai@1.0.4
@langchain/google-webauth==0.*
@langchain/google-webauth==0.2.17
@langchain/google-webauth==0.2.18
@langchain/google-webauth==1.*
@langchain/google-webauth==1.0.0
@langchain/google-webauth@1.*
@langchain/google-webauth@1.0.2
@langchain/google-webauth@1.0.3
@langchain/google-webauth@1.0.4
@langchain/groq==0.*
@langchain/groq==0.2.4
@langchain/groq==1.*
@langchain/groq==1.0.0
@langchain/groq@1.*
@langchain/groq@1.0.2
@langchain/mcp-adapters==1.*
@langchain/mcp-adapters==1.0.0
@langchain/mcp-adapters@1.*
@langchain/mcp-adapters@1.0.1
@langchain/mistralai==0.*
@langchain/mistralai==0.2.2
@langchain/mistralai==1.*
@langchain/mistralai==1.0.0
@langchain/mistralai@1.*
@langchain/mistralai@1.0.1
@langchain/mixedbread-ai==1.*
@langchain/mixedbread-ai==1.0.0
@langchain/mixedbread-ai@1.*
@langchain/mixedbread-ai@1.0.1
@langchain/mongodb==1.*
@langchain/mongodb==1.0.0
@langchain/mongodb@1.*
@langchain/mongodb@1.0.1
@langchain/nomic==1.*
@langchain/nomic==1.0.0
@langchain/nomic@1.*
@langchain/nomic@1.0.1
@langchain/ollama==0.*
@langchain/ollama==0.2.4
@langchain/ollama==1.*
@langchain/ollama==1.0.0
@langchain/ollama==1.0.1
@langchain/ollama@1.*
@langchain/ollama@1.0.2
@langchain/openai==0.*
@langchain/openai==0.5.17
@langchain/openai==0.6.10
@langchain/openai==0.6.12
@langchain/openai==0.6.14
@langchain/openai==0.6.5
@langchain/openai==0.6.6
@langchain/openai==1.*
@langchain/openai==1.0.0
@langchain/openai==1.1.0
@langchain/openai@1.*
@langchain/openai@1.1.2
@langchain/pinecone==1.*
@langchain/pinecone==1.0.0
@langchain/pinecone@1.*
@langchain/pinecone@1.0.1
@langchain/qdrant==1.*
@langchain/qdrant==1.0.0
@langchain/qdrant@1.*
@langchain/qdrant@1.0.1
@langchain/redis==0.*
@langchain/redis==0.1.2
@langchain/redis==0.1.3
@langchain/redis==1.*
@langchain/redis==1.0.0
@langchain/redis@1.*
@langchain/redis@1.0.1
@langchain/tavily==1.*
@langchain/tavily==1.0.0
@langchain/tavily@1.*
@langchain/tavily@1.0.1
@langchain/textsplitters==1.*
@langchain/textsplitters==1.0.0
@langchain/textsplitters@1.*
@langchain/textsplitters@1.0.1
@langchain/vertexai-web==1.*
@langchain/vertexai-web==1.0.0
@langchain/vertexai==1.*
@langchain/vertexai==1.0.0
@langchain/weaviate==0.*
@langchain/weaviate==0.2.3
@langchain/weaviate==1.*
@langchain/weaviate==1.0.0
@langchain/weaviate@1.*
@langchain/weaviate@1.0.1
@langchain/xai==1.*
@langchain/xai==1.0.0
@langchain/xai@1.*
@langchain/xai@1.0.2
@langchain/yandex==1.*
@langchain/yandex==1.0.0
@langchain/yandex@1.*
@langchain/yandex@1.0.1
langchain==0.*
langchain==0.3.22
langchain==0.3.32
langchain==0.3.33
langchain==0.3.34
langchain==0.3.35
langchain==1.*
langchain==1.0.0
langchain==1.0.1
langchain==1.0.2
langchain==1.0.3
langchain==1.0.4
langchain@1.*
langchain@1.0.5
langchain@1.0.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105799.json"