{"id":"EUVD-2026-93431","enisaUuid":"457a752d-7b18-3935-b1f9-bfa274ccfbbf","description":"LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker\u0027s intended scope. This issue is fixed in version 1.1.1.","datePublished":"Oct 6, 2026, 2:45:38 PM","dateUpdated":"Oct 6, 2026, 5:39:51 PM","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2\nhttps://github.com/langchain-ai/langchainjs/pull/10701\nhttps://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1\n","aliases":"CVE-2026-105799\nGHSA-5x6v-p487-7qh2\n","assigner":"GitHub_M","epss":0.28,"enisaIdProduct":[{"id":"2617fdc1-54b2-3653-a391-8b291495859c","product":{"name":"Redis","vendor":{"name":"Redis"}},"product_version":"\u003c 1.1.1"},{"id":"c2887dcc-b212-3672-9c6d-1a440ef3e6ab","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.1.1"}],"enisaIdVendor":[{"id":"4ac801d5-fc16-3851-a7f5-a6756bb3ca6b","vendor":{"name":"@langchain"}},{"id":"ce2bad99-ffd6-3b14-b30c-d5fd6c1f881e","vendor":{"name":"langchain-ai"}}],"enisaIdVulnerability":[{"id":"71c61543-c684-3fec-a01a-822210685eb4","vulnerability":{"id":"CVE-2026-105799","description":"LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker\u0027s intended scope. This issue is fixed in version 1.1.1.","datePublished":"Oct 6, 2026, 2:45:38 PM","dateUpdated":"Oct 6, 2026, 5:39:51 PM","status":"PUBLISHED","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2\nhttps://github.com/langchain-ai/langchainjs/pull/10701\nhttps://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1\n","enisa_id":"EUVD-2026-93431\n","assigner":"GitHub_M","epss":0.28,"dataProcessed":"Nov 4, 2026, 7:15:38 AM","vulnerabilityProduct":[{"id":"b6bc40e0-0c04-3eb5-b050-20c369eb2339","product":{"name":"Redis","vendor":{"name":"Redis"}},"product_version":"\u003c 1.1.1"},{"id":"dc2dabcb-d0ec-3903-b3fb-3f09e7b5b6c7","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.1.1"}],"vulnerabilityVendor":[{"id":"b4681f8e-dbdb-35e2-8406-1cdff4dc9070","vendor":{"name":"langchain-ai"}},{"id":"e1725e14-a675-3ec9-a162-f0795a5eab1e","vendor":{"name":"@langchain"}}]}},{"id":"db15b96a-6ffc-3eb7-9c5b-1312f69eb2a2","vulnerability":{"id":"GHSA-5x6v-p487-7qh2","description":"LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values","datePublished":"Oct 6, 2026, 3:32:34 PM","dateUpdated":"Oct 6, 2026, 3:32:34 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105799\nhttps://github.com/langchain-ai/langchainjs/pull/10701\nhttps://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7\nhttps://github.com/langchain-ai/langchainjs\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1\n","enisa_id":"EUVD-2026-93431\n","aliases":"GHSA-5x6v-p487-7qh2\nCVE-2026-105799\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}