Read the docs
TI-2026-39975 Aliases CVE-2026-55405GHSA-2mfg-cc43-9pcj

LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

Priority LOW 34CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-89.

Summary

LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly into the query without adequate escaping. A crafted metadata key in EmbeddingSearchRequest.filter() can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores' search and removeAll(Filter) operations, enabling blind data exfiltration, denial of service via sleep functions, and deletion of arbitrary rows through removeAll(Filter). This issue is fixed in langchain4j-mariadb and langchain4j-pgvector versions 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00474 41st percentileScored 2026-11-07
Fix Fixed langchain4j (langchain4j): 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19 +1dev.langchain4j:langchain4j-mariadb (Maven): 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19 +1+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
langchain4jlangchain4jbefore 1.2.1-beta8; 1.3.0-beta9 to before 1.5.1-beta11; 1.6.0-beta12 to before 1.11.8-beta19; 1.12.1-beta21 to before 1.16.3-beta261.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, 1.16.3-beta26Patch availableCNA
—dev.langchain4j:langchain4j-mariadb (Maven)before 1.2.1-beta81.2.1-beta8Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-mariadb (Maven)1.3.0-beta9 to before 1.5.1-beta111.5.1-beta11Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-mariadb (Maven)1.6.0-beta12 to before 1.11.8-beta191.11.8-beta19Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-mariadb (Maven)1.12.1-beta21 to before 1.16.3-beta261.16.3-beta26Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-pgvector (Maven)before 1.2.1-beta81.2.1-beta8Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-pgvector (Maven)1.3.0-beta9 to before 1.5.1-beta111.5.1-beta11Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-pgvector (Maven)1.6.0-beta12 to before 1.11.8-beta191.11.8-beta19Patch availableGHSA-2mfg-cc43-9pcj
—dev.langchain4j:langchain4j-pgvector (Maven)1.12.1-beta21 to before 1.16.3-beta261.16.3-beta26Patch availableGHSA-2mfg-cc43-9pcj
  • langchain4j Vendorlangchain4j Affected before 1.2.1-beta8; 1.3.0-beta9 to before 1.5.1-beta11; 1.6.0-beta12 to before 1.11.8-beta19; 1.12.1-beta21 to before 1.16.3-beta26 Fixed in 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, 1.16.3-beta26 Patch available CNA
  • dev.langchain4j:langchain4j-mariadb (Maven) Vendor— Affected before 1.2.1-beta8 Fixed in 1.2.1-beta8 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-mariadb (Maven) Vendor— Affected 1.3.0-beta9 to before 1.5.1-beta11 Fixed in 1.5.1-beta11 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-mariadb (Maven) Vendor— Affected 1.6.0-beta12 to before 1.11.8-beta19 Fixed in 1.11.8-beta19 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-mariadb (Maven) Vendor— Affected 1.12.1-beta21 to before 1.16.3-beta26 Fixed in 1.16.3-beta26 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-pgvector (Maven) Vendor— Affected before 1.2.1-beta8 Fixed in 1.2.1-beta8 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-pgvector (Maven) Vendor— Affected 1.3.0-beta9 to before 1.5.1-beta11 Fixed in 1.5.1-beta11 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-pgvector (Maven) Vendor— Affected 1.6.0-beta12 to before 1.11.8-beta19 Fixed in 1.11.8-beta19 Patch available GHSA-2mfg-cc43-9pcj
  • dev.langchain4j:langchain4j-pgvector (Maven) Vendor— Affected 1.12.1-beta21 to before 1.16.3-beta26 Fixed in 1.16.3-beta26 Patch available GHSA-2mfg-cc43-9pcj

Remediation

  • Fix · CNA langchain4j (langchain4j) Fixed in 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, 1.16.3-beta26
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-mariadb (Maven) Fixed in 1.2.1-beta8 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-mariadb (Maven) Fixed in 1.5.1-beta11 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-mariadb (Maven) Fixed in 1.11.8-beta19 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-mariadb (Maven) Fixed in 1.16.3-beta26 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-pgvector (Maven) Fixed in 1.2.1-beta8 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-pgvector (Maven) Fixed in 1.5.1-beta11 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-pgvector (Maven) Fixed in 1.11.8-beta19 Advisory →
  • Fix · GHSA-2mfg-cc43-9pcj dev.langchain4j:langchain4j-pgvector (Maven) Fixed in 1.16.3-beta26 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-55405
  2. 2026-10-03 Alias added: GHSA-2mfg-cc43-9pcj

References

Other 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences