A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does not enforce restrictions on requests to remote internet addresses, allowing it to also access local addresses. As a result, an attacker could exploit this flaw to perform port scans, access local services, retrieve instance metadata from cloud environments (e.g., Azure, AWS), and interact with servers on the local network. This issue has been fixed in version 0.0.28.
References
| Link | Resource |
|---|---|
| https://github.com/langchain-ai/langchain/commit/e188d4ecb085d4561a0be3c583d26aa9c2c3283f | Patch |
| https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc | Exploit Third Party Advisory |
| https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc | Exploit Third Party Advisory |
Configurations
History
16 Jul 2025, 19:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:langchain:langchain:*:*:*:*:community:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 10.0 |
| References | () https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc - Exploit, Third Party Advisory | |
| References | () https://github.com/langchain-ai/langchain/commit/e188d4ecb085d4561a0be3c583d26aa9c2c3283f - Patch | |
| First Time |
Langchain langchain
Langchain |
24 Jun 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
23 Jun 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-23 21:15
Updated : 2025-07-16 19:46
NVD link : CVE-2025-2828
Mitre link : CVE-2025-2828
JSON object : View
Products Affected
langchain
- langchain
CWE
No CWE.