{"id":"EUVD-2026-32640","revision":"7965690af263475dbd83a266b61c4f2b","records":[{"revision":"7965690af263475dbd83a266b61c4f2b","observedAt":"2026-10-30T07:55:44.947+00:00","statement":{"source":"euvd","id":"EUVD-2026-32640","aliases":["CVE-2026-45134","GHSA-3644-q5cj-c5c7"],"title":"LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullProm…","description":"LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","score":7.1,"severity":null}],"references":["https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32640","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 27, 2026, 7:35:32 PM","dateUpdated":"Jun 2, 2026, 6:13:59 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2026:11284-1","title":"python313-langsmith-0.10.3-1.1 on GA media","vulnerabilityIds":["CVE-2026-40190","CVE-2026-41182","CVE-2026-45134"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-32640","identifiers":["EUVD-2026-32640","CVE-2026-45134","GHSA-3644-q5cj-c5c7"]},"retained":false,"historicalAffected":[]}],"coverage":[]}