CVE-2025-46725 Details
Description
Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the host system. Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.
A code injection vulnerability has been identified in the Langroid Python framework, specifically in versions prior to 0.53.15. The issue arises within the LanceDocChatAgent, which utilizes the pandas eval() function to process calculations from documents. This vulnerability allows an attacker to execute malicious commands by manipulating the evaluation process, potentially compromising the host system. The problem is rooted in the agent's handling of untrusted input, which can be exploited to execute harmful code under certain conditions.
Users can upgrade to Langroid version 0.53.15 or later, which includes input sanitization for the affected function and addresses the vulnerability. Additionally, the Langroid documentation now contains warnings about the risks associated with unsanitized input.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 20, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| langroid langroid | < 0.53.15 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 13, 2025 | Initial Analysis | [email protected] |
| May 20, 2025 | New CVE Received | [email protected] |