{"id":"EUVD-2026-8697","enisaUuid":"7a66303b-f32c-39f4-ac93-1411655eeaab","description":"LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in `RecursiveUrlLoader` in `@langchain/community`. The loader validates the initial URL but allows the underlying fetch to follow redirects automatically, which permits a transition from a safe public URL to an internal or metadata endpoint without revalidation. This is a bypass of the SSRF protections introduced in 1.1.14 (CVE-2026-26019). Users should upgrade to `@langchain/community` 1.1.18, which validates every redirect hop by disabling automatic redirects and re-validating `Location` targets before following them. In this version, automatic redirects are disabled (`redirect: \"manual\"`), each 3xx `Location` is resolved and validated with `validateSafeUrl()` before the next request, and a maximum redirect limit prevents infinite loops.","datePublished":"Feb 25, 2026, 5:30:01 PM","dateUpdated":"Feb 25, 2026, 6:42:52 PM","baseScore":4.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-mphv-75cg-56wg\nhttps://github.com/langchain-ai/langchainjs/security/advisories/GHSA-gf3v-fwqg-4vh7\nhttps://github.com/langchain-ai/langchainjs/pull/9990\nhttps://github.com/langchain-ai/langchainjs/commit/2812d2b2b9fd9343c4850e2ab906b8cf440975ee\nhttps://github.com/langchain-ai/langchainjs/commit/d5e3db0d01ab321ec70a875805b2f74aefdadf9d\nhttps://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.14\nhttps://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.18\n","aliases":"CVE-2026-27795\nGHSA-mphv-75cg-56wg\n","assigner":"GitHub_M","epss":0.25,"enisaIdProduct":[{"id":"abccbcee-6cd8-32b2-887b-54795d9d7402","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.1.18"}],"enisaIdVendor":[{"id":"397abb48-7561-32e6-acfa-094996e11476","vendor":{"name":"langchain-ai"}}],"enisaIdVulnerability":[{"id":"343318fe-3c27-324e-b1d3-9f902c32e70b","vulnerability":{"id":"GHSA-mphv-75cg-56wg","description":"LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader","datePublished":"Feb 25, 2026, 10:59:48 PM","dateUpdated":"Feb 25, 2026, 10:59:48 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-gf3v-fwqg-4vh7\nhttps://github.com/langchain-ai/langchainjs/security/advisories/GHSA-mphv-75cg-56wg\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-27795\nhttps://github.com/langchain-ai/langchainjs/pull/9990\nhttps://github.com/langchain-ai/langchainjs/commit/2812d2b2b9fd9343c4850e2ab906b8cf440975ee\nhttps://github.com/langchain-ai/langchainjs/commit/d5e3db0d01ab321ec70a875805b2f74aefdadf9d\nhttps://github.com/langchain-ai/langchainjs\nhttps://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.14\nhttps://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.18\n","enisa_id":"EUVD-2026-8697\n","aliases":"GHSA-mphv-75cg-56wg\nCVE-2026-27795\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:45:46 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"adac383d-9844-3810-b919-4ddfd3557094","vulnerability":{"id":"CVE-2026-27795","description":"LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in `RecursiveUrlLoader` in `@langchain/community`. The loader validates the initial URL but allows the underlying fetch to follow redirects automatically, which permits a transition from a safe public URL to an internal or metadata endpoint without revalidation. This is a bypass of the SSRF protections introduced in 1.1.14 (CVE-2026-26019). Users should upgrade to `@langchain/community` 1.1.18, which validates every redirect hop by disabling automatic redirects and re-validating `Location` targets before following them. In this version, automatic redirects are disabled (`redirect: \"manual\"`), each 3xx `Location` is resolved and validated with `validateSafeUrl()` before the next request, and a maximum redirect limit prevents infinite loops.","datePublished":"Feb 25, 2026, 5:30:01 PM","dateUpdated":"Feb 25, 2026, 6:42:52 PM","status":"PUBLISHED","baseScore":4.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-mphv-75cg-56wg\nhttps://github.com/langchain-ai/langchainjs/security/advisories/GHSA-gf3v-fwqg-4vh7\nhttps://github.com/langchain-ai/langchainjs/pull/9990\nhttps://github.com/langchain-ai/langchainjs/commit/2812d2b2b9fd9343c4850e2ab906b8cf440975ee\nhttps://github.com/langchain-ai/langchainjs/commit/d5e3db0d01ab321ec70a875805b2f74aefdadf9d\nhttps://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.14\nhttps://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.18\n","enisa_id":"EUVD-2026-8697\n","assigner":"GitHub_M","epss":0.25,"dataProcessed":"Nov 13, 2026, 7:21:32 AM","vulnerabilityProduct":[{"id":"e4300d41-5dcb-3af9-9b17-fbb6e193cd40","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.1.18"}],"vulnerabilityVendor":[{"id":"a80c7153-f93b-3323-b811-80fcdf728d6d","vendor":{"name":"langchain-ai"}}]}}],"enisaIdAdvisory":[]}