LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load() with allowed_objects="all". This does not enable arbitrary Python object deserialization, but it does allow any trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As a result, attacker-supplied LangChain serialized constructor dictionaries may cause trusted runtime paths to instantiate classes with untrusted constructor arguments. This vulnerability is fixed in 0.3.85 and 1.3.3.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3,
    LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other
    application-controlled payloads using overly broad object allowlists. These paths may call load() with
    allowed_objects="all". This does not enable arbitrary Python object deserialization, but it does allow any
    trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As
    a result, attacker-supplied LangChain serialized constructor dictionaries may cause trusted runtime paths
    to instantiate classes with untrusted constructor arguments. This vulnerability is fixed in 0.3.85 and
    1.3.3. (CVE-2026-44843)

ID	Name	Product	Family	Type	Severity
464783	Echo: langchain-core: security update to 0.3.85	Tenable Cloud Security	Echo Local Security Checks	Local	high
464783	Echo: langchain-core: security update to 0.3.85	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
441570	SCA: security update for langchain-core (GHSA-pjwx-r37v-7724)	Tenable Cloud Security	SCA Checks	Local	high
441570	SCA: security update for langchain-core (GHSA-pjwx-r37v-7724)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-44843

high

Tenable Plugins

high

high

high

high