CVE-2026-40190 | langchain-ai langsmith-sdk up to 0.5.17 set prototype pollution

A vulnerability marked as . Affected is the function Set. The manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is uniquely identified as CVE-2026-40190. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.