CVE-2026-45134 Details
Description
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.
A vulnerability exists in the LangSmith SDKs for Python and JS/TS, prior to the patched versions, allowing the prompt pull methods to fetch and deserialize prompt manifests from the LangSmith Hub without proper trust validation. These manifests can include serialized LangChain objects and model configurations that influence runtime behavior. When a public prompt is pulled using the owner/name identifier, the content is controlled by an external party. However, earlier SDK versions did not differentiate this risk from pulling prompts within the user's own organization. As a result, applications could unintentionally execute harmful configurations or code from untrusted sources.
Upgrade to LangSmith SDK Python version 0.8.0 or JS/TS version 0.6.0. When using the prompt pull methods, be cautious with public prompts from untrusted sources and review the contents before deserialization. For same-organization prompts, ensure that organizational API keys are secure and prompt contents are reviewed before deployment.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-3644-q5cj-c5c7 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 27, 2026 | New CVE Received | [email protected] |