Read the docs
TI-2025-29396 Aliases CVE-2025-46725GHSA-22c2-9gwg-mj59

Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

Priority MEDIUM 44CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-94.

Summary

Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the host system. Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00534 45th percentileScored 2026-11-07
Fix Fixed langroid (langroid): 0.53.15langroid (PyPI): 0.53.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
langroidlangroidbefore 0.53.150.53.15Patch availableCNA
—langroid (PyPI)before 0.53.150.53.15Patch availableGHSA-22c2-9gwg-mj59
  • langroid Vendorlangroid Affected before 0.53.15 Fixed in 0.53.15 Patch available CNA
  • langroid (PyPI) Vendor— Affected before 0.53.15 Fixed in 0.53.15 Patch available GHSA-22c2-9gwg-mj59

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*before 0.53.15Vulnerablelangroid
  • cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:* Versions before 0.53.15 Vulnerable ·langroid

Remediation

  • Fix · CNA langroid (langroid) Fixed in 0.53.15
  • Fix · GHSA-22c2-9gwg-mj59 langroid (PyPI) Fixed in 0.53.15 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-46725
  2. 2026-10-03 Alias added: GHSA-22c2-9gwg-mj59

References

Patch 1

Advisory 2

Other 1

  • TI-2026-20592 Langroid has WAF Bypass Leading to RCE in TableChatAgent CVSS 4.0CRITICAL 9.4
  • TI-2025-29395 Langroid has a Code Injection vulnerability in TableChatAgent CVSS 3.1CRITICAL 9.8
  • TI-2025-29397 Langroid Vulnerable to XXE Injection via XMLToolMessage CVSS 4.0HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences