In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.
Why This Matters
The evidence matters to defenders using the affected technology because it may let untrusted content influence connected tools or sensitive workflows.
Recommended Action
Read the linked source. Identify named vendors, products, or environments and check whether they overlap with yours. Do not wait for a CVE if the report already describes exploitation or a vendor response.
Affected