Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

langchain-experimental

langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).

CVE-2024-46946 is a critical vulnerability affecting LangChain Experimental versions 0.1.17 through 0.3.0, specifically in the LLMSymbolicMathChain feature introduced in October 2023. The vulnerability stems from the use of sympy.sympify, a function that converts strings into symbolic math expressions but internally relies on Python's eval function. Eval executes arbitrary Python code, and if user input is not properly sanitized, it can lead to remote code execution (RCE). This means an attacker can craft malicious input to execute arbitrary commands on the host system running LangChain Experimental, potentially taking full control. The vulnerability requires no authentication or user interaction and can be exploited remotely, making it highly dangerous. The CVSS 3.1 base score is 9.8, reflecting the high impact on confidentiality, integrity, and availability. Although no known exploits are currently in the wild, the widespread use of LangChain in AI and symbolic math processing workflows makes this a significant threat. The vulnerability is classified under CWE-20 (Improper Input Validation), highlighting the root cause as insufficient input sanitization before eval execution. No official patches or fixes have been published yet, so users must take precautionary measures to mitigate risk.

Detailed information about CVE-2024-46946: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-46946: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-46946: n/a

langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.

CVE-2024-38459 is a vulnerability identified in LangChain Experimental (langchain_experimental) versions prior to 0.0.61. The flaw arises because the software provides Python REPL (Read-Eval-Print Loop) access without requiring an explicit opt-in from users, effectively allowing execution of arbitrary Python code. This vulnerability is a regression or incomplete fix related to a previous vulnerability, CVE-2024-27444, indicating that the initial remediation did not fully address the underlying issue. The vulnerability is characterized by a CVSS v3.1 score of 7.8, with the vector indicating local attack vector (AV:L), low attack complexity (AC:L), no privileges required (PR:N), user interaction required (UI:R), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). This means an attacker needs local access and user interaction to exploit the vulnerability, but once exploited, they can execute arbitrary Python commands, potentially leading to full system compromise. The vulnerability is categorized under CWE-276 (Incorrect Default Permissions), highlighting that the default configuration exposes dangerous functionality without proper restrictions. No patches or exploit code are currently publicly available, but the risk remains significant due to the nature of the vulnerability and its impact on systems running LangChain Experimental. The vulnerability affects Python environments where LangChain Experimental is used, particularly in AI and automation workflows that leverage LangChain's capabilities.

Detailed information about CVE-2024-38459: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-38459: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-38459: n/a

langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute in Python code. These are not prohibited by pal_chain/base.py.

CVE-2024-27444 is a critical vulnerability affecting the LangChain Experimental library prior to version 0.1.8. LangChain is a popular framework used for building applications with large language models, often involving dynamic Python code execution. This vulnerability specifically allows attackers to bypass the fix implemented for CVE-2023-44467 by exploiting the unsafe handling of certain Python special attributes within the pal_chain/base.py module. These attributes include __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, and __base__, which provide powerful introspection and code execution capabilities in Python. Because these attributes are not prohibited or sanitized, an attacker can craft malicious input that leverages them to execute arbitrary Python code remotely. The vulnerability requires no authentication and no user interaction, making it highly exploitable over the network. The CVSS v3.1 score of 9.8 reflects the criticality, with attack vector being network-based, low attack complexity, no privileges required, and no user interaction needed. The flaw falls under CWE-749 (Exposed Dangerous Method or Function). Although no public exploits are known yet, the severity and ease of exploitation make this a significant threat to any organization using vulnerable versions of LangChain Experimental. Immediate patching and code audits are essential to mitigate risk.

Detailed information about CVE-2024-27444: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-46946: n/aCVE-2024-46946 0 langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05). CriticalVulnerabilityUnited StatesChinaIndia+7#cve #cve-2024-46946 Join the discussion	CVE Database V5	09/19/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:34 UTC
CVE-2024-38459: n/aCVE-2024-38459 0 langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444. HighVulnerabilityUnited StatesChinaIndia+7#cve #cve-2024-38459 Join the discussion	CVE Database V5	06/16/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:14 UTC
CVE-2024-27444: n/aCVE-2024-27444 0 langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute in Python code. These are not prohibited by pal_chain/base.py. CriticalVulnerabilityUnited StatesChinaIndia+7#cve #cve-2024-27444 Join the discussion	CVE Database V5	02/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:33 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional