---
id: "CVE-2023-32785"
kind: "vulnerability"
aliases: ["CVE-2023-32785", "GHSA-8h5w-f6q9-wg35"]
title: "Langchain SQL Injection vulnerability"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "withdrawn"
category: "ai-tooling"
products: [{"name": "langchain", "fixed": ["0.0.247"], "affected": "< 0.0.247", "ecosystem": "pypi"}]
ecosystems: ["pypi"]
tags: ["ai-apps", "ai-tooling", "cwe-74", "cwe-89", "langchain", "python"]
not_affected_if: ["version-0.0.247-or-later"]
published_at: "2023-10-20T22:15:10+00:00"
first_seen_at: "2026-10-27T17:32:35+00:00"
updated_at: "2026-10-27T17:36:17+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-8h5w-f6q9-wg35", "first_seen_at": "2026-10-27T17:32:35+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32785", "first_seen_at": "2026-10-27T17:32:47+00:00"}]
---

# Langchain SQL Injection vulnerability

This CVE record was withdrawn as a duplicate of CVE-2023-36189 and its description was removed. The GitHub advisory GHSA-8h5w-f6q9-wg35 still lists a SQL injection in LangChain before 0.0.247 with a critical CVSS score of 9.8.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:langchain affected < 0.0.247 fixed 0.0.247

## How to check

- Check whether the project pins `langchain` below `0.0.247` with `pip show langchain`
- Look at the dependency lock file for a `langchain` version below `0.0.247`

## Fix

- Upgrade `langchain` to `0.0.247` or later, following the fix for CVE-2023-36189
- Treat CVE-2023-32785 as a duplicate and track CVE-2023-36189 instead

## Timeline

- 2026-10-27T17:32:35+00:00 ghsa https://github.com/advisories/GHSA-8h5w-f6q9-wg35
- 2026-10-27T17:32:47+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-32785

## From the sources

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36189. Reason: This record is a duplicate of CVE-2023-36189. Notes: All CVE users should reference CVE-2023-36189 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_