{"id":"EUVD-2026-93431","enisaUuid":"457a752d-7b18-3935-b1f9-bfa274ccfbbf","description":"LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker\u0027s intended scope. This issue is fixed in version 1.1.1.","datePublished":"Oct 6, 2026, 2:45:38 PM","dateUpdated":"Oct 6, 2026, 5:39:51 PM","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2\nhttps://github.com/langchain-ai/langchainjs/pull/10701\nhttps://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1\n","aliases":"CVE-2026-105799\nGHSA-5x6v-p487-7qh2\n","assigner":"GitHub_M","epss":0.28,"enisaIdProduct":[{"id":"2617fdc1-54b2-3653-a391-8b291495859c","product":{"name":"Redis","vendor":{"name":"Redis"}},"product_version":"\u003c 1.1.1"},{"id":"c2887dcc-b212-3672-9c6d-1a440ef3e6ab","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.1.1"}],"enisaIdVendor":[{"id":"4ac801d5-fc16-3851-a7f5-a6756bb3ca6b","vendor":{"name":"@langchain"}},{"id":"ce2bad99-ffd6-3b14-b30c-d5fd6c1f881e","vendor":{"name":"langchain-ai"}}],"enisaIdVulnerability":[{"id":"71c61543-c684-3fec-a01a-822210685eb4","vulnerability":{"id":"CVE-2026-105799","description":"LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker\u0027s intended scope. This issue is fixed in version 1.1.1.","datePublished":"Oct 6, 2026, 2:45:38 PM","dateUpdated":"Oct 6, 2026, 5:39:51 PM","status":"PUBLISHED","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2\nhttps://github.com/langchain-ai/langchainjs/pull/10701\nhttps://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1\n","enisa_id":"EUVD-2026-93431\n","assigner":"GitHub_M","epss":0.28,"dataProcessed":"Nov 11, 2026, 7:21:30 AM","vulnerabilityProduct":[{"id":"b6bc40e0-0c04-3eb5-b050-20c369eb2339","product":{"name":"Redis","vendor":{"name":"Redis"}},"product_version":"\u003c 1.1.1"},{"id":"dc2dabcb-d0ec-3903-b3fb-3f09e7b5b6c7","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.1.1"}],"vulnerabilityVendor":[{"id":"b4681f8e-dbdb-35e2-8406-1cdff4dc9070","vendor":{"name":"langchain-ai"}},{"id":"e1725e14-a675-3ec9-a162-f0795a5eab1e","vendor":{"name":"@langchain"}}]}},{"id":"db15b96a-6ffc-3eb7-9c5b-1312f69eb2a2","vulnerability":{"id":"GHSA-5x6v-p487-7qh2","description":"LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values","datePublished":"Oct 6, 2026, 3:32:34 PM","dateUpdated":"Oct 6, 2026, 3:32:34 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105799\nhttps://github.com/langchain-ai/langchainjs/pull/10701\nhttps://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7\nhttps://github.com/langchain-ai/langchainjs\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1\n","enisa_id":"EUVD-2026-93431\n","aliases":"GHSA-5x6v-p487-7qh2\nCVE-2026-105799\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"a32c6e2b-3b3a-3250-87c5-f570dd932295","advisory":{"id":"WID-SEC-W-2026-3776","description":"LangChain: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in LangChain ausnutzen, um Informationen offenzulegen und Daten zu manipulieren.","datePublished":"Oct 6, 2026, 10:00:00 PM","dateUpdated":"Oct 6, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3776.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3776\n","aliases":"CVE-2026-105799\nCVE-2026-106119\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"d4cfd9e1-b7f0-3b1b-9ec5-410e3382085d","product":{"name":"1.3.1","vendor":{"name":"open source"}}},{"id":"f05e0977-8ddb-38b3-a7d2-548110a8123b","product":{"name":"1.1.1","vendor":{"name":"CISA"}}},{"id":"fdbea832-9a8e-3ac0-9537-84c83aa085c9","product":{"name":"langchain","vendor":{"name":"langchain-ai"}}}]}}]}