CVE-2026-72848

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72848
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72848.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72848
Published
2026-08-20T21:57:36.212Z
Modified
2026-08-23T03:42:26.552022328Z
Severity
  • 7.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator
Summary
langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery
Details

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to self.scrapeall([loc.text], "xml"), which reaches WebBaseLoader.scrapeall and an aiohttp GET, with no domain comparison and no check for private, loopback or link-local destinations. An attacker who controls or influences an ingested sitemap can therefore point a nested sitemap entry at an internal address and make the server fetch it even when the deploying application set restricttosame_domain to True specifically to confine outbound requests. The fetched content is parsed and surfaces in the returned Documents, so internal responses are disclosed to the caller rather than merely requested.

Database specific 
{
    "cwe_ids": [
        "CWE-918"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72848.json"
}
References

Affected packages

Git / github.com/langchain-ai/langchain-community

Affected ranges

Type
GIT
Repo
https://github.com/langchain-ai/langchain-community
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7c10a5fa327f6aaaf7c932822a9e5d144891406e
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4.2"
        }
    ]
}

Affected versions

libs/community/v0.*
libs/community/v0.3.23
libs/community/v0.3.24
libs/community/v0.3.25
libs/community/v0.3.26
libs/community/v0.3.27
libs/community/v0.3.28
libs/community/v0.3.29
libs/community/v0.3.30
libs/community/v0.3.31
libs/community/v0.4
libs/community/v0.4.1
libs/community/v0.4.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72848.json"