--- cve: "CVE-2025-68665" severity: "HIGH" cvss: 8.6 epss: "81%" vendor: "langchain-ai" kev: false exploited: false published: "2025-12-23 23:15:45" tags: [cve, security, high] source: tsecurity.de CVE-Dossier exported: "2026-09-11T04:42:35+02:00" --- # CVE-2025-68665 > 8.6 HIGH · 🧪 PoC ## Beschreibung LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain versions 0.3.37 and 1.2.3, a serialization injection vulnerability exists in LangChain JS's toJSON() method (and subsequently when string-ifying objects using JSON.stringify(). The method did not escape objects with 'lc' keys when serializing free-form data in kwargs. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in @langchain/core versions 0.3.80 and 1.1.8, and langchain versions 0.3.37 and 1.2.3 ## CVSS-Vektor ``` CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N ``` | Metrik | Wert | Bewertung | |---|---|---| | AV Angriffsvektor | Netzwerk | bad | | AC Komplexität | Gering | bad | | PR Privilegien | Keine | bad | | UI Interaktion | Keine | bad | | S Scope | Verändert | bad | | C Vertraulichkeit | Hoch | bad | | I Integrität | Keine | good | | A Verfügbarkeit | Keine | good | ## Patch verfügbar (OSV) - de32b32b0b4bbd4ce2445e3044dd8011b3a78b30 (Commit) - d0c905ddcc2471d0c89a2f1520d96782253ba5c3 (Commit) ## Referenzen - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-68665) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_