LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an application passes user-influenced prompt configurations to load_prompt() or load_prompt_from_config(), an attacker can read arbitrary files on the host filesystem, constrained only by file-extension checks (.txt for templates, .json/.yaml for examples). This issue has been patched in version 1.2.22.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22,
    multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config
    dicts without validating against directory traversal or absolute path injection. When an application
    passes user-influenced prompt configurations to load_prompt() or load_prompt_from_config(), an attacker
    can read arbitrary files on the host filesystem, constrained only by file-extension checks (.txt for
    templates, .json/.yaml for examples). This issue has been patched in version 1.2.22. (CVE-2026-34070)

The version of LangChain Core installed on the remote host is prior to 1.2.22. It is, therefore, affected by a path traversal vulnerability:

  - Multiple functions in langchain_core.prompts.loading read files from paths embedded in     deserialized config dicts without validating against directory traversal or absolute path     injection. When an application passes user-influenced prompt configurations to load_prompt()     or load_prompt_from_config(), an attacker can read arbitrary files on the host filesystem,     constrained only by file-extension checks. (CVE-2026-34070)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
462689	Echo: langchain-core: security update to 1.2.21+echo.1	Tenable Cloud Security	Echo Local Security Checks	Local	high
462689	Echo: langchain-core: security update to 1.2.21+echo.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
304816	LangChain Core < 1.2.22 Path Traversal (GHSA-qh6h-p6c9-ff54)	Nessus	Artificial Intelligence	Local	high
439582	SCA: security update for langchain-core (GHSA-qh6h-p6c9-ff54)	Tenable Cloud Security	SCA Checks	Local	high
439582	SCA: security update for langchain-core (GHSA-qh6h-p6c9-ff54)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-34070

high

Tenable Plugins

high

high

high

high

high