{"id":"CVE-2023-32785","kind":"vulnerability","aliases":["CVE-2023-32785","GHSA-8h5w-f6q9-wg35"],"related":[],"title":"Langchain SQL Injection vulnerability","description":"Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36189. Reason: This record is a duplicate of CVE-2023-36189. Notes: All CVE users should reference CVE-2023-36189 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.","summary":"This CVE record was withdrawn as a duplicate of CVE-2023-36189 and its description was removed. The GitHub advisory GHSA-8h5w-f6q9-wg35 still lists a SQL injection in LangChain before 0.0.247 with a critical CVSS score of 9.8.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"langchain","fixed":["0.0.247"],"affected":"< 0.0.247","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["ai-apps","ai-tooling","cwe-74","cwe-89","langchain","python"],"not_affected_if":["version-0.0.247-or-later"],"how_to_check":"- Check whether the project pins `langchain` below `0.0.247` with `pip show langchain`\n- Look at the dependency lock file for a `langchain` version below `0.0.247`","fix":"- Upgrade `langchain` to `0.0.247` or later, following the fix for CVE-2023-36189\n- Treat CVE-2023-32785 as a duplicate and track CVE-2023-36189 instead","status":"withdrawn","published_at":"2023-10-20T22:15:10+00:00","first_seen_at":"2026-10-27T17:32:35+00:00","triaged_at":"2026-10-27T17:36:17+00:00","updated_at":"2026-10-27T17:36:17+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-10-27T17:36:17Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade `langchain` to `0.0.247` or later, following the fix for CVE-2023-36189\n- Treat CVE-2023-32785 as a duplicate and track CVE-2023-36189 instead","reach":"unknown","title":"LangChain: withdrawn SQL injection record, duplicate of CVE-2023-36189","impact":"high","summary":"This CVE record was withdrawn as a duplicate of CVE-2023-36189 and its description was removed. The GitHub advisory GHSA-8h5w-f6q9-wg35 still lists a SQL injection in LangChain before 0.0.247 with a critical CVSS score of 9.8.","category":"ai-tooling","nicknames":[],"who_cares":["python","langchain","ai-apps"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker runs arbitrary SQL against the connected database","analyst_note":"Confirm the affected code path and exploit conditions from the GHSA-8h5w-f6q9-wg35 advisory and CVE-2023-36189, since this record has no description.","how_to_check":"- Check whether the project pins `langchain` below `0.0.247` with `pip show langchain`\n- Look at the dependency lock file for a `langchain` version below `0.0.247`","needs_analyst":true,"not_affected_if":["version-0.0.247-or-later"],"who_is_affected":"Teams that run the Python `langchain` package at a version below `0.0.247` and build SQL-backed chains from user input. Projects on `0.0.247` or later, or that do not use LangChain, can skip it. The withdrawn record itself gives no details, so the affected code path comes from the GitHub advisory.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000656,"input_tokens":3405,"output_tokens":631,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-2023':6A,14A,39B,80C,90C,99C '-32785':7A,15A '-36189':40B,81C,91C,100C '-74':24B '-89':26B '0.0.247':62B '8h5w':10A,51B '9.8':69B 'accident':117C 'advisori':48B 'ai':18B,21B 'ai-app':17B 'ai-tool':20B 'app':19B 'consultid':78C 'critic':65B 'cve':5A,13A,30B,38B,76C,79C,89C,94C,98C 'cvss':66B 'cwe':23B,25B 'descript':43B,108C 'duplic':36B,87C 'f6q9':11A,52B 'ghsa':9A,50B 'ghsa-8h5w-f6q9-wg35':8A,49B 'github':47B 'inject':3A,58B 'instead':101C 'langchain':1A,16A,27B,60B 'list':55B 'note':92C 'prevent':116C 'python':28B 'reason':71C,82C 'record':31B,77C,84C,104C,111C 'refer':97C,106C 'reject':70C 'remov':45B,114C 'score':67B 'sql':2A,57B 'still':54B 'tool':22B 'usag':118C 'use':74C 'user':95C 'vulner':4A 'wg35':12A,53B 'withdrawn':33B","nicknames":[],"mitigations":[],"who_affected":"Teams that run the Python `langchain` package at a version below `0.0.247` and build SQL-backed chains from user input. Projects on `0.0.247` or later, or that do not use LangChain, can skip it. The withdrawn record itself gives no details, so the affected code path comes from the GitHub advisory.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2023-10-20T22:15:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-8h5w-f6q9-wg35","url":"https://github.com/advisories/GHSA-8h5w-f6q9-wg35","severity":"critical","published_at":"2023-10-21T00:30:47+00:00","modified_at":"2026-10-27T17:28:51+00:00","first_seen_at":"2026-10-27T17:32:35+00:00","fetched_at":"2026-10-27T17:32:35+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-32785","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32785","severity":null,"published_at":"2023-10-20T22:15:10+00:00","modified_at":"2023-12-26T18:15:07+00:00","first_seen_at":"2026-10-27T17:32:47+00:00","fetched_at":"2026-10-27T17:32:47+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}