LLMHigh
CVE-2023-29374: In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execut…
- Occurred
- Apr 5, 2023
- Published
- Apr 5, 2023
- Source
- NVD CVE
Summary
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Tags
- CVE
- CVE-2023-29374
- cvss:CRITICAL
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Prompt injection vulnerability in LangChain allows arbitrary code execution, representing a significant security risk.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8