LangChain Experimental versions 0.1.17 through 0.3.0 contain a critical vulnerability (CVE-2024-46946) in the LLMSymbolicMathChain component that allows attackers to execute arbitrary code via sympy.sympify, which internally uses eval. This vulnerability arises from improper handling of input leading to code injection risks.