CVE-2025-6984: langchain-ai/langchain · Information Exposure
Affects langchain-ai/langchainSource CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 06:26 UTC
- EPSS
- 1.6% chance of exploitation in 30 days – higher than 76% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 4 Sep 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| langchain-ai langchain-ai/langchain | Affected
| Fixed in– |
AI-suggested
To mitigate CVE-2025-6984, organizations should immediately update langchain-ai/langchain to a patched version once available. In the absence of an official patch, developers should disable external entity processing in XML parsers by configuring etree.iterparse() with secure parser settings that prohibit external entity resolution. Specifically, use XML parser libraries or configurations that explicitly disable DTD processing and external entity expansion. Code audits should be conducted to identify all XML parsing instances and ensure secure parsing practices are enforced. Additionally, implement strict input validation and sanitization for any XML data processed by the application. Network-level controls such as restricting outbound connections from application servers can limit the ability of attackers to exploit XXE for out-of-band data exfiltration. Monitoring and logging XML parsing errors or unusual file access patterns can help detect exploitation attempts. Finally, organizations should review and minimize the exposure of sensitive files on systems running langchain components to reduce the potential impact of data disclosure.
Description
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse() without disabling external entity references, which can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data such as /etc/passwd.