{"id":"EUVD-2026-32640","enisaUuid":"474e061e-8408-3150-9167-917e62e1ff41","description":"LangSmith Client SDKs provide SDK\u0027s for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK\u0027s prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller\u0027s own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.","datePublished":"May 27, 2026, 7:35:32 PM","dateUpdated":"Jun 2, 2026, 6:13:59 PM","baseScore":7.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","references":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7\n","aliases":"CVE-2026-45134\nGHSA-3644-q5cj-c5c7\n","assigner":"GitHub_M","epss":0.2,"enisaIdProduct":[{"id":"1aa765e6-91f4-3e30-b2f8-9ea3e0e0c836","product":{"name":"langsmith-sdk","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 0.6.0"},{"id":"31b7dec9-2971-3542-8ded-facd6db888aa","product":{"name":"langsmith-sdk","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 0.8.0"}],"enisaIdVendor":[{"id":"28f45172-6d19-3159-84c2-b809ce7dfe1e","vendor":{"name":"langchain-ai"}}],"enisaIdVulnerability":[{"id":"5aefe09d-528a-3c9c-9d9e-896a23d6e7c3","vulnerability":{"id":"CVE-2026-45134","description":"LangSmith Client SDKs provide SDK\u0027s for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK\u0027s prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller\u0027s own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.","datePublished":"May 27, 2026, 7:35:32 PM","dateUpdated":"Jun 2, 2026, 6:13:59 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","references":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7\n","enisa_id":"EUVD-2026-32640\n","assigner":"GitHub_M","epss":0.2,"dataProcessed":"Oct 30, 2026, 7:17:41 AM","vulnerabilityProduct":[{"id":"0c9a553a-4511-3efe-9e78-2e6d1fb50728","product":{"name":"langsmith-sdk","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 0.8.0"},{"id":"391455c4-863d-35a0-b9db-5102efcf7a70","product":{"name":"langsmith-sdk","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 0.6.0"}],"vulnerabilityVendor":[{"id":"b99f8711-b404-31c7-90ce-0dc0c45c7691","vendor":{"name":"langchain-ai"}}]}},{"id":"5e3537db-336a-3a86-b0b4-a137fdef260e","vulnerability":{"id":"GHSA-3644-q5cj-c5c7","description":"LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning","datePublished":"May 13, 2026, 3:29:30 PM","dateUpdated":"Jun 8, 2026, 11:54:03 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45134\nhttps://github.com/langchain-ai/langsmith-sdk\n","enisa_id":"EUVD-2026-32640\n","aliases":"CVE-2026-45134\nGHSA-3644-q5cj-c5c7\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a8fd78c1-509d-3e9b-881f-a0d19ebb3318","vulnerability":{"id":"PYSEC-2026-2555","description":"LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning","datePublished":"Jul 13, 2026, 3:15:46 PM","dateUpdated":"Jul 13, 2026, 4:04:30 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45134\nhttps://github.com/langchain-ai/langsmith-sdk\nhttps://pypi.org/project/langchain\nhttps://github.com/advisories/GHSA-3644-q5cj-c5c7\n","enisa_id":"EUVD-2026-32640\n","aliases":"CVE-2026-45134\nGHSA-3644-q5cj-c5c7\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:10:53 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f1356fb0-1563-3c6d-bde3-3fcd995728ea","vulnerability":{"id":"PYSEC-2026-2560","description":"LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning","datePublished":"Jul 13, 2026, 3:15:46 PM","dateUpdated":"Jul 13, 2026, 4:04:29 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45134\nhttps://github.com/langchain-ai/langsmith-sdk\nhttps://pypi.org/project/langchain-classic\nhttps://github.com/advisories/GHSA-3644-q5cj-c5c7\n","enisa_id":"EUVD-2026-32640\n","aliases":"CVE-2026-45134\nGHSA-3644-q5cj-c5c7\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:10:53 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fe4343e9-2f63-30ba-98cf-43d169e319dd","vulnerability":{"id":"PYSEC-2026-2582","description":"LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning","datePublished":"Jul 13, 2026, 3:15:46 PM","dateUpdated":"Jul 13, 2026, 4:04:34 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45134\nhttps://github.com/langchain-ai/langsmith-sdk\nhttps://pypi.org/project/langsmith\nhttps://github.com/advisories/GHSA-3644-q5cj-c5c7\n","enisa_id":"EUVD-2026-32640\n","aliases":"CVE-2026-45134\nGHSA-3644-q5cj-c5c7\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:10:53 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"6b39fec9-9c65-3a07-abef-29e24b808c39","advisory":{"id":"openSUSE-SU-2026:11284-1","description":"python313-langsmith-0.10.3-1.1 on GA media","summary":"python313-langsmith-0.10.3-1.1 on GA media","datePublished":"Jul 15, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:14:53 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11284-1.json\nhttps://www.suse.com/security/cve/CVE-2026-40190/\nhttps://www.suse.com/security/cve/CVE-2026-41182/\nhttps://www.suse.com/security/cve/CVE-2026-45134/\n","aliases":"CVE-2026-40190\nCVE-2026-41182\nCVE-2026-45134\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0227d6a3-0632-3b0f-9ba6-a5ea5b2bc781","product":{"name":"python314-langsmith-0:0.10.3-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"34f77c2b-9b16-33b8-a56a-6701bdb53ecf","product":{"name":"python313-langsmith-0:0.10.3-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"37150e3e-89cc-3e15-8805-34bcd0374307","product":{"name":"python313-langsmith-0:0.10.3-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"47c30fdd-9b38-37df-b8f5-58bab740c39b","product":{"name":"python314-langsmith-0:0.10.3-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"85d14875-31bf-357c-b5b8-7df586897db6","product":{"name":"python314-langsmith-0:0.10.3-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d68c1e27-4dce-3e93-aa8e-a19c2c8686d7","product":{"name":"python314-langsmith-0:0.10.3-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e072a730-1d36-3b77-aa21-34dba1ecef1a","product":{"name":"python313-langsmith-0:0.10.3-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e1c8435a-8472-3473-91c0-3dc2bd36a144","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"e9916aa9-35f1-31be-a816-8965c74a6a9b","product":{"name":"python313-langsmith-0:0.10.3-1.1.x86_64","vendor":{"name":"SUSE"}}}]}}]}