CVE-2026-105799: CWE-943: Improper Neutralization of Special Elements in Data Query Logic in langchain-ai langchainjs
Description
LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker's intended scope. This issue is fixed in version 1.1.1.
CVSS v4.0
Score 2.3low
Affected software
langchain-ai
langchainjs
@langchain
redis
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
LangChain's @langchain/redis module versions before 1.1.1 do not properly escape attacker-controlled values in structured RediSearch TAG and TEXT filters. This improper neutralization (CWE-943) allows injection of RediSearch syntax, which can modify or broaden search queries. When such filters are used as tenant or document-access boundaries, attackers may gain access to indexed documents outside their authorized scope. The vulnerability has a CVSS 4.0 score of 2.3, indicating low severity, and no known exploits in the wild. The issue is resolved in version 1.1.1.
Potential Impact
An attacker able to influence filter values can inject RediSearch syntax to alter search queries, potentially exposing documents indexed in Redis that should be restricted. This could lead to unauthorized data disclosure if the filters are used to enforce tenant or document-access boundaries.
Mitigation Recommendations
Upgrade to langchainjs version 1.1.1 or later, where the issue is fixed by properly escaping attacker-controlled values in RediSearch filters. No other mitigation is indicated or required.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-05T20:37:19.364Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac50de12cdf04f656bca32c
Added to database: 10/06/2026, 15:04:01 UTC
Last enriched: 10/06/2026, 15:18:39 UTC
Last updated: 10/06/2026, 18:57:27 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.