CVE-2023-32786

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and…

published October 20, 2023

CVSS
—
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00709 · 52.9th percentile
Published
2023-10-20T00:00Z
EPSS history
Timeline
  • 20 OCT 00:00Z
    In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and…
    cvelistv5