Act active

Critical LangChain CVE-2025-68664 with Public PoC on GitHub

2026-10-10 16:14 UTC · HN (cve) · read the source ↗ #langchain #ai-security #critical-cve

Engineer — Act: A public PoC on GitHub lowers the bar for exploitation even without KEV listing; if langchain-core is in your dependency tree, audit the pinned version and patch to the fixed release immediately.
SOC/IR — Skip
Leader — Skip
Signals: CVE-2025-68664 — CISA KEV: not listed, EPSS 0.43, public PoC on GitHub

This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.