Critical LangChain Core Vulnerability (CVE-2025-68664) Allows Serialization Injection Attacks
By
shahartal
Sesame, salt, and substance. A flagship bake.
Summary
Cyata Research discloses LangGrinch (CVE-2025-68664), a critical vulnerability in LangChain Core that allows serialization injection attacks. The vulnerability enables attackers to manipulate LLM-influenced metadata to be rehydrated as objects, potentially leading to secret leaks and unsafe instantiation. The research builds on previous work breaking secret managers, highlighting how platforms that accidentally treat attacker-shaped data as trusted structure can collapse security boundaries. LangChain has published a critical advisory and patch guidance for the vulnerability.
Key quotes
· 4 pulledYesterday, LangChain published a critical advisory for a vulnerability I reported in langchain-core: CVE-2025-68664 / GHSA-c67j-w6g6-q2cm.
One takeaway kept repeating: when a platform accidentally treats attacker-shaped data as trusted structure, that boundary collapses fast.
Cyata discloses LangGrinch (CVE-2025-68664), a critical LangChain Core serialization injection bug where untrusted, LLM-influenced metadata can be rehydrated as objects, enabling secret leaks and unsafe instantiation.
This time, the system that 'breaks' isn't your secret manager.
You might also wanna read
CVE-2026-45185 (Dead.Letter): Unauthenticated RCE in Exim Discovered by XBOW
XBOW discovered CVE-2026-45185, a critical unauthenticated remote code execution vulnerability in Exim mail server. The article details the
xbow.com·19d ago
CVE-2026-31431 "Copy Fail" Linux Kernel LPE Exploit Proof-of-Concept Released
This article presents a proof-of-concept exploit toolkit for CVE-2026-31431 ("Copy Fail"), a Linux kernel vulnerability in the algif_aead/au
github.com·1mo ago
Critical Vulnerability Discovery in Nix Package Manager Ecosystem
The article details how the author and a colleague discovered a critical vulnerability in the Nix package manager ecosystem that could have
ptrpa.ws·7mo ago
North Korean Chollima Group Targets PHP Developers via Malicious Packagist Package
A malicious obfuscated JavaScript payload was discovered appended to tailwind.js in the Packagist development version dev-drewroberts/featur
socket.dev·5h ago
Microsoft uncovers supply chain attack: Compromised @antv npm packages steal CI/CD credentials via Mini Shai-Hulud malware
Microsoft has identified an active supply chain attack targeting the @antv npm package ecosystem. A threat actor compromised an @antv mainta
npm malware targeting Claude users leaks own GitHub token, reaches 676 downloads
An npm package called "mouse5212-super-formatter" targeting Claude users acted as information-stealing malware, reaching 676 downloads befor
theregister.com·1d ago