CVE-2026-45134
Published:May 27, 2026
Updated:June 10, 2026
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.
Affected Packages
langchain-classic (CONDA):
Affected version(s) >=1.0.1 <1.0.7Fix Suggestion:
Update to version 1.0.7langsmith (CONDA):
Affected version(s) >=0.0.7 <0.8.0Fix Suggestion:
Update to version 0.8.0langchain-classic (CONDA):
Affected version(s) >=1.0.1 <1.0.7Fix Suggestion:
Update to version 1.0.7langchain (CONDA):
Affected version(s) >=0.0.136 <0.3.30Fix Suggestion:
Update to version 0.3.30langsmith (CONDA):
Affected version(s) >=0.0.7 <0.8.0Fix Suggestion:
Update to version 0.8.0langchain (CONDA):
Affected version(s) >=1.0.0 <1.0.7Fix Suggestion:
Update to version 1.0.7langsmith (NPM):
Affected version(s) >=0.0.1 <0.6.0Fix Suggestion:
Update to version 0.6.0langsmith (NPM):
Affected version(s) >=0.0.1 <0.6.0Fix Suggestion:
Update to version 0.6.0langchain-classic (PYTHON):
Affected version(s) >=1.0.0a1 <1.0.7Fix Suggestion:
Update to version 1.0.7langchain (PYTHON):
Affected version(s) >=0.0.1 <0.3.30Fix Suggestion:
Update to version 0.3.30langchain (PYTHON):
Affected version(s) >=1.0.0 <1.0.7Fix Suggestion:
Update to version 1.0.7langchain-classic (PYTHON):
Affected version(s) >=1.0.0a1 <1.0.7Fix Suggestion:
Update to version 1.0.7langsmith (PYTHON):
Affected version(s) >=0.0.0rc0 <0.8.0Fix Suggestion:
Update to version 0.8.0langsmith (PYTHON):
Affected version(s) >=0.0.1 <0.8.0Fix Suggestion:
Update to version 0.8.0langchain (PYTHON):
Affected version(s) >=0.0.1 <0.3.30Fix Suggestion:
Update to version 0.3.30Related Resources (3)
Do you need more information?
Contact UsCVSS v4
Base Score:
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
LOW
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Deserialization of Untrusted Data
EPSS
Base Score:
0.04