CVE-2025-68664

Published Dec 23, 2025

Last updated 3 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-68664 is a serialization injection vulnerability found in LangChain, a framework used for building agents and LLM-powered applications. The vulnerability exists in versions prior to 0.3.81 and 1.2.5, specifically within the `dumps()` and `dumpd()` functions. These functions fail to properly escape dictionaries containing the `'lc'` key during serialization. The `'lc'` key is used internally by LangChain to identify serialized objects. When user-controlled data includes this key structure, the system incorrectly interprets it as a legitimate LangChain object during deserialization, rather than treating it as plain user data. This can allow attackers to exfiltrate sensitive environment variables and potentially execute code. The vulnerability has been addressed in versions 0.3.81 and 1.2.5.

Description: LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
Source: security-advisories@github.com
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.3
Impact score: 4.7
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-502

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 27

References