The vulnerability (CVE-2026-41481) affects langchain-text-splitters before version 1.1.2. The function HTMLHeaderTextSplitter.split_text_from_url() uses validate_safe_url() to check the initial URL but performs the HTTP fetch with requests.get() with redirects enabled by default. Redirect targets are not revalidated, enabling an attacker to supply a URL that redirects to internal, localhost, or cloud metadata endpoints, bypassing SSRF protections. The fetched response body is parsed into Document objects and returned to the application. If the application exposes these Document contents back to the requester, sensitive internal data could be leaked. Applications that do not expose Document contents to the requester are not directly impacted. The vulnerability is fixed in version 1.1.2.

An attacker can exploit this SSRF vulnerability to cause the application to fetch data from internal or cloud metadata endpoints by supplying a malicious URL that redirects to these endpoints. This can lead to unauthorized disclosure of sensitive internal information if the application returns the fetched Document contents to the requester. There is no indication of integrity or availability impact. The severity is rated medium with a CVSS score of 6.5.

This vulnerability is fixed in langchain-text-splitters version 1.1.2. Users should upgrade to version 1.1.2 or later to remediate the issue. There is no official remediation level stated beyond the fix. No additional mitigations are specified by the vendor advisory. Patch status is confirmed by the vendor advisory.