Live › vulnerability › CVE-2024-27444
Go to dashboardLangChain Experimental before 0.0.52 fails to block dangerous Python dunder attributes such as __import__, __subclasses__ and __globals__ in its PAL chain, bypassing the earlier CVE-2023-44467 fix. An attacker who can get text into the chain's input can execute arbitrary code on the host running it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:56 UTC, 0h before NVD. All times on this page are UTC.
Applications that use the LangChain Experimental PAL chain (pal_chain) with input that can come from users or untrusted content are exposed, because the chain executes model-generated Python. Systems that do not use langchain_experimental, or that never route untrusted text into PAL chains, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| langchain-experimental | pypi | < 0.0.52 | 0.0.52 |
| langchain langchain-experimental | vendor | < 0.1.8 | 0.1.8 |
pip show langchain-experimental and confirm the version is below 0.0.52.PALChain or pal_chain from langchain_experimental.langchain-experimental to 0.0.52 or later.langchain to 0.1.8 or later if it is used alongside the experimental package.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
langchain_experimental (aka LangChain Experimental) before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute in Python code. These are not prohibited by pal_chain/base.py.
This page as .md · .json · in your agent: get_signal("CVE-2024-27444")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.