Last seen October 29, 2024

langchain Prompt Injection Vulnerability

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.

Why This Matters

Publisher reporting describes a concrete security event. BugSkan could not yet bind it to a CVE or affected version, so treat the source details as the current record.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Denial is present in your environment and review the affected configuration.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Oct 29, 2024 21:02

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

langchainlangchain-communityPrompt InjectionvulnerabilityDeniallangchain-ai/langchain

Timeline

  • Incident first seen
    Jun 07, 2024 03:00

    BugSkan first recorded this incident.

  • Denial of service in langchain-community
    Jun 07, 2024 03:00

    OSV.dev · Research

  • Langchain SQL Injection vulnerability
    Oct 29, 2024 21:02

    OSV.dev · Vulnerability

  • Langchain SQL Injection vulnerability
    Oct 29, 2024 21:02

    GitHub Advisory Database · Vulnerability

  • Latest observed development
    Oct 29, 2024 21:02

    Most recent source or update associated with this incident.

Sources

Denial of service in langchain-community

OSV.dev · Jun 07, 2024 03:00

Denial of service in `SitemapLoader` Document Loader in the `langchain-community` package, affecting versions below 0.2.5. The `parse_sitemap` method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceeding the maximum recursion depth in Python. This vulnerability can be exploited to occupy server socket/port resources and crash the Python process, impacting the availability of services relying on this functionality.

Open publisher source
Langchain SQL Injection vulnerability

OSV.dev · Oct 29, 2024 21:02

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.

Open publisher source
Langchain SQL Injection vulnerability

GitHub Advisory Database · Oct 29, 2024 21:02

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.

Open publisher source

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence