Critical

LangChain Experimental Eval Injection vulnerability

Disclosed: 19.09.2024
Updated: 11.10.2026 12:20

langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).

Affected software

Click a technology to see all vulnerabilities affecting it.

Platform	Package	Vulnerable versions	Fixed in
Python (PyPI)	langchain-experimental	>= 0.1.17, <= 0.3.0	no fix

References

CVSS score 9.8/10

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-95
Platform: Python (PyPI)
Package: langchain-experimental
Disclosed: 19.09.2024
Updated: 11.10.2026 12:20

Sources and licenses

OSV / GitHub Advisory Database - GHSA-p2qj-r53j-h3xj - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2026-374 - PyPA Advisory Database; CC BY 4.0

Vulnerability history: langchain-experimental

All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.

Total entries: 5
First → latest: 10.2023 09.2024
Without a fix: 1
Exploited in attacks: 0

Severity breakdown

Critical 4
High 1

Disclosures per year

2023: 1
2024: 4
2025: 0
2026: 0

19.09.2024

LangChain Experimental Eval Injection vulnerability this entry

Critical · 9.8 CVE-2024-46946 >= 0.1.17, <= 0.3.0 no fix
15.07.2024

Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' o

Critical · 8.5 CVE-2024-21513 < 0.0.21 0.0.21
16.06.2024

langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27

High · 7.8 CVE-2024-38459 < 0.0.61 0.0.61
26.02.2024

LangChain Experimental vulnerable to arbitrary code execution

Critical · 9.8 CVE-2024-27444 < 0.0.52 0.0.52
09.10.2023

langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.

Critical · 9.8 CVE-2023-44467 < 0.0.15 0.0.15

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application