CVE-2023-29374: Code Injection
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec() method.
Other sources
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29374?
CVE-2023-29374 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2023-29374?
To fix CVE-2023-29374, update LangChain to version 0.0.132 or later that mitigates the prompt injection attack.
What is the impact of CVE-2023-29374?
The impact of CVE-2023-29374 allows attackers to perform prompt injection attacks leading to the execution of arbitrary code.
Which versions are affected by CVE-2023-29374?
CVE-2023-29374 affects all versions of LangChain up to and including 0.0.131.
Who is vulnerable to CVE-2023-29374?
Any user or application utilizing LangChain versions up to 0.0.131 is vulnerable to CVE-2023-29374.