{"id":"EUVD-2026-93771","enisaUuid":"8007bf79-d121-344b-81b1-87b05cb243a9","description":"LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted structured session identifier at runtime, allowing the identifier to be interpreted as a MongoDB query condition rather than as a literal value when multiple users\u0027 histories are stored in a shared MongoDB collection. An attacker able to invoke chat-history operations can read, modify, or delete another user\u0027s stored conversation. Applications using authenticated, server-controlled string identifiers are not affected. This issue is fixed in version 1.3.1.","datePublished":"Oct 6, 2026, 6:01:24 PM","dateUpdated":"Oct 6, 2026, 7:45:43 PM","baseScore":6.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95\nhttps://github.com/langchain-ai/langchainjs/pull/11672\nhttps://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1\n","aliases":"CVE-2026-106119\nGHSA-m6rx-h84q-8r95\n","assigner":"GitHub_M","epss":0.46,"enisaIdProduct":[{"id":"35306865-99bc-3a19-9df4-b443403cc7f5","product":{"name":"MongoDB","vendor":{"name":"@feathersjs"}},"product_version":"\u003c 1.3.1"},{"id":"b626846a-f6e2-3cc4-abd1-5172cd80c86b","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.5.14"}],"enisaIdVendor":[{"id":"76d1ebfd-026c-3db0-98c9-1554b7c063da","vendor":{"name":"langchain-ai"}},{"id":"e5de7131-82c5-3d67-9885-d022a7beb3ab","vendor":{"name":"@langchain"}}],"enisaIdVulnerability":[{"id":"77871296-6e3f-3e62-8db4-6e1a69c5b270","vulnerability":{"id":"GHSA-m6rx-h84q-8r95","description":"LangChain: MongoDBChatMessageHistory query injection can allow cross-session access","datePublished":"Oct 8, 2026, 5:52:22 PM","dateUpdated":"Oct 8, 2026, 5:52:22 PM","baseScore":0.0,"references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-106119\nhttps://github.com/langchain-ai/langchainjs/pull/11672\nhttps://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af\nhttps://github.com/langchain-ai/langchainjs\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1\n","enisa_id":"EUVD-2026-93771\n","aliases":"CVE-2026-106119\nGHSA-m6rx-h84q-8r95\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:02:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"cb116c2f-d7bb-3996-a7d7-92f5c0283d2b","vulnerability":{"id":"CVE-2026-106119","description":"LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted structured session identifier at runtime, allowing the identifier to be interpreted as a MongoDB query condition rather than as a literal value when multiple users\u0027 histories are stored in a shared MongoDB collection. An attacker able to invoke chat-history operations can read, modify, or delete another user\u0027s stored conversation. Applications using authenticated, server-controlled string identifiers are not affected. This issue is fixed in version 1.3.1.","datePublished":"Oct 6, 2026, 6:01:24 PM","dateUpdated":"Oct 6, 2026, 7:45:43 PM","status":"PUBLISHED","baseScore":6.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95\nhttps://github.com/langchain-ai/langchainjs/pull/11672\nhttps://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af\nhttps://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1\n","enisa_id":"EUVD-2026-93771\n","assigner":"GitHub_M","epss":0.46,"dataProcessed":"Oct 27, 2026, 7:16:42 AM","vulnerabilityProduct":[{"id":"4dd09c9a-70ed-3b1b-b5c4-3956c5224f57","product":{"name":"langchainjs","vendor":{"name":"langchain-ai"}},"product_version":"\u003c 1.5.14"},{"id":"b5c1c73d-62a8-33f0-91dd-b6abe863c662","product":{"name":"MongoDB","vendor":{"name":"@feathersjs"}},"product_version":"\u003c 1.3.1"}],"vulnerabilityVendor":[{"id":"3858c153-675f-3c5e-8df5-c54ce0c58e68","vendor":{"name":"@langchain"}},{"id":"528dbba3-33f2-3bb2-8910-1709b37f71d4","vendor":{"name":"langchain-ai"}}]}}],"enisaIdAdvisory":[]}