CVE-2026-25481
Description
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.59.32, there is a bypass to the fix for CVE-2025-46724. TableChatAgent can call pandas_eval tool to evaluate the expression. There is a WAF in langroid/utils/pandas_utils.py introduced to block code injection CVE-2025-46724. However it can be bypassed due to _literal_ok() returning False instead of raising UnsafeCommandError on invalid input, combined with unrestricted access to dangerous dunder attributes (__init__, __globals__, __builtins__). This allows chaining whitelisted DataFrame methods to leak the eval builtin and execute arbitrary code. This issue has been patched in version 0.59.32.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
langroidPyPI | < 0.59.32 | 0.59.32 |
Affected products
3cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*range: <0.59.32
- (no CPE)range: < 0.59.32
Patches
Vulnerability mechanics
References
7- github.com/langroid/langroid/commit/30abbc1a854dee22fbd2f8b2f575dfdabdb603eanvdPatchWEB
- github.com/langroid/langroid/security/advisories/GHSA-x34r-63hx-w57fnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-x34r-63hx-w57fghsaADVISORY
- github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hjnvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2026-25481ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/langroid/PYSEC-2026-383.yamlghsaWEB
- pypi.org/project/langroidghsaWEB
News mentions
0No linked articles in our index yet.