CVE-2026-45134

{
  "id": "CVE-2026-45134",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-27T20:16:38.697",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0."
    },
    {
      "lang": "es",
      "value": "Los SDKs de cliente de LangSmith proporcionan SDKs para interactuar con la plataforma LangSmith. Antes de LangSmith SDK Python 0.8.0 y JS/TS 0.6.0, los métodos de extracción de prompts del SDK de LangSmith (pull_prompt / pull_prompt_commit en Python, pullPrompt / pullPromptCommit en JS/TS) recuperan y deserializan manifiestos de prompts del LangSmith Hub. Estos manifiestos pueden contener objetos LangChain serializados y configuración de modelo que afectan el comportamiento en tiempo de ejecución. Al extraer un prompt público por identificador de propietario/nombre, el contenido del manifiesto es controlado por una parte externa, pero las versiones anteriores del SDK no distinguían esto de extraer un prompt dentro de la propia organización del llamador. Esta vulnerabilidad está corregida en LangSmith SDK Python 0.8.0 y JS/TS 0.6.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "langchain-ai",
          "product": "langsmith-sdk",
          "versions": [
            {
              "version": "< 0.8.0",
              "status": "affected"
            },
            {
              "version": "< 0.6.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-02T18:13:39.078019Z",
          "id": "CVE-2026-45134",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7",
      "source": "[email protected]"
    }
  ]
}