{"id":"CVE-2026-41182","sourceIdentifier":"security-advisories@github.com","published":"2026-04-23T02:16:16.123","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK, the LangSmith SDK's output redaction controls (hideOutputs in JS, hide_outputs in Python) do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a new_token event containing the raw token value. These events bypass the redaction pipeline entirely — prepareRunCreateOrUpdateInputs (JS) and _hide_run_outputs (Python) only process the inputs and outputs fields on a run, never the events array. As a result, applications relying on output redaction to prevent sensitive LLM output from being stored in LangSmith will still leak the full streamed content via run events. Version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK fix the issue."},{"lang":"es","value":"Los SDKs de cliente de LangSmith proporcionan SDKs para interactuar con la plataforma LangSmith. Antes de la versión 0.5.19 del SDK de JavaScript y la versión 0.7.31 del SDK de Python, los controles de redacción de salida del SDK de LangSmith (hideOutputs en JS, hide_outputs en Python) no se aplican a los eventos de token de streaming. Cuando una ejecución de LLM produce salida de streaming, cada fragmento se registra como un evento new_token que contiene el valor de token sin procesar. Estos eventos eluden completamente la canalización de redacción - prepareRunCreateOrUpdateInputs (JS) y _hide_run_outputs (Python) solo procesan los campos de entrada y salida en una ejecución, nunca el array de eventos. Como resultado, las aplicaciones que dependen de la redacción de salida para evitar que la salida sensible de LLM se almacene en LangSmith seguirán filtrando el contenido completo de streaming a través de los eventos de ejecución. La versión 0.5.19 del SDK de JavaScript y la versión 0.7.31 del SDK de Python solucionan el problema."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"langchain-ai","product":"langsmith-sdk","versions":[{"version":"< 0.5.19","status":"affected"},{"version":"< 0.7.31","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-23T14:22:03.787610Z","id":"CVE-2026-41182","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-359"},{"lang":"en","value":"CWE-532"}]}],"references":[{"url":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-rr7j-v2q5-chgv","source":"security-advisories@github.com"}]}