VulnerabilityPublished 16 Jun 2026

Bundesamt für Sicherheit in der Informationstechnik Open Source · LangChain: Schwachstelle ermöglicht Offenlegung von Informationen und Umgehen von Sicherheitsvorkehrungen

Affects Bundesamt für Sicherheit in der Informationstechnik Open SourceSource GCVE Database

Severity

High

Rated by Threat Radar

Patch: Available – fixed in 1.3.9

Data as of 17 Jun 2026, 16:51 UTC

bundesamt-f-r-sicherheit-in-de

What to do

Upgrade Bundesamt für Sicherheit in der Informationstechnik Open Source to 1.3.9.

Affected software

Product	Affected	Fixed in
Bundesamt für Sicherheit in der Informationstechnik Open Source	Affected <1.3.9 =1.3.9	Fixed in 1.3.9

Description

A vulnerability in the open-source LangChain framework, which facilitates development with large language models (LLMs), allows information disclosure and bypassing of security controls. The affected versions include all versions prior to 1.3.9 and version 1.3.9 itself. No CVSS score or detailed technical exploitation information is provided.

Impact

The vulnerability can lead to unauthorized information disclosure and circumvention of security controls within applications using affected LangChain versions. This may compromise confidentiality and the integrity of security measures relying on the framework.

Summary

LangChain, an open-source framework for building applications with large language models, contains a vulnerability that enables attackers to disclose information and bypass security mechanisms. The vulnerability affects versions before and including 1.3.9. The Bundesamt für Sicherheit in der Informationstechnik has published an advisory (WID-SEC-W-2026-1958) but has not provided a CVSS score or patch information. No known exploits have been reported in the wild to date.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 17 Jun 2026, 16:51 UTC

Technical details

References

Community reviews

Related threats