CVE-2026-97869Published
langchain4j LangChain4j-agentic AgenticScopeJsonSerializationIT.java AgenticScopeSerializer.fromJson deserialization
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-97869 · Microsoft / collected KEV context
cve-program · CVE-2026-97869
- https://vuldb.com/vuln/409886
- https://vuldb.com/vuln/409886/cti
- https://vuldb.com/cve/CVE-2026-97869
- https://vuldb.com/submit/911825
- https://github.com/langchain4j/langchain4j/security/advisories/GHSA-gmwr-7wmf-mrjm
- https://github.com/afish3201-debug/CVE/blob/main/Insecure%20Jackson%20Default%20Typing%20Leads%20to%20Arbitrary%20Class%20Instantiation%20in%20LangChain4j%20Agentic%20Module.md
- https://github.com/langchain4j/langchain4j/releases/tag/1.18.1
- https://github.com/langchain4j/langchain4j/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.