LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and
    1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The
    functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key
    is used internally by LangChain to mark serialized objects. When user-controlled data contains this key
    structure, it is treated as a legitimate LangChain object during deserialization rather than plain user
    data. This issue has been patched in versions 0.3.81 and 1.2.5. (CVE-2025-68664)

LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
455528	Echo: langchain-core: security update to 0.3.81	Tenable Cloud Security	Echo Local Security Checks	Local	high
455528	Echo: langchain-core: security update to 0.3.81	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
344295	LangChain-Core < 0.3.81 / 1.x < 1.2.5	Nessus	Artificial Intelligence	Local	high
436484	SCA: security update for langchain-core (GHSA-c67j-w6g6-q2cm)	Tenable Cloud Security	SCA Checks	Local	high
436484	SCA: security update for langchain-core (GHSA-c67j-w6g6-q2cm)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2025-68664

high

Tenable Plugins

high

high

high

high

high