{"id":"CVE-2024-46946","details":"langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).","aliases":["GHSA-p2qj-r53j-h3xj","PYSEC-2026-374"],"modified":"2026-08-12T03:51:10.795833565Z","published":"2024-09-19T00:00:00Z","database_specific":{"unresolved_ranges":[{"source":"DESCRIPTION","extracted_events":[{"fixed":"sympy.sympify"}]}],"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46946.json"},"references":[{"type":"WEB","url":"https://cwe.mitre.org/data/definitions/95.html"},{"type":"WEB","url":"https://docs.sympy.org/latest/modules/codegen.html"},{"type":"WEB","url":"https://gist.github.com/12end/68c0c58d2564ef4141bccd4651480820#file-cve-2024-46946-txt"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-experimental%3D%3D0.3.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46946.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46946"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/langchain-ai/langchain","events":[{"introduced":"14422a4220780cfca9afd564d99fecc3dfc3155a"},{"fixed":"58c7414e10a00bb33f45ad5d1965ed44b3b4f0df"}],"database_specific":{"extracted_events":[{"introduced":"0.1.17"},{"last_affected":"0.3.0"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:langchain:langchain-experimental:*:*:*:*:*:*:*:*"}}],"versions":["langchain-openai==0.2.0","langchain-text-splitters==0.3.0","langchain-mistralai==0.2.0","langchain-core==0.3.0","langchain-openai==0.1.25","langchain-core==0.2.40","langchain-community==0.2.17","langchain-openai==0.1.24","langchain-groq==0.1.10","langchain-core==0.2.39","langchain-mongodb==0.1.9","langchain-experimental==0.0.65","langchain-community==0.2.16","langchain==0.2.16","langchain-text-splitters==0.2.4","langchain-mistralai==0.1.13","langchain-core==0.2.38","langchain-ollama==0.1.3","langchain-community==0.2.15","langchain-core==0.2.37","langchain-prompty==0.0.3","langchain-core==0.2.36","langchain-ollama==0.1.2","langchain-community==0.2.14","langchain-community==0.2.13","langchain-openai==0.1.23","langchain==0.2.15","langchain-core==0.2.35","langchain-cli==0.0.30","langchain-box==0.1.0","langchain-unstructured==0.1.2","langchain-core==0.2.34","langchain-openai==0.1.22","langchain-core==0.2.33","langchain==0.2.14","langchain-core==0.2.32","langchain-core==0.2.31","langchain-anthropic==0.1.23","langchain-community==0.2.12","langchain==0.2.13","langchain-core==0.2.30","langchain-openai==0.1.21","langchain-mongodb==0.1.8","langchain-cli==0.0.29","langchain-openai==0.1.21rc2","langchain-core==0.2.29","langchain-milvus==0.1.4","langchain-openai==0.1.21rc1","langchain-core==0.2.29rc1","langchain-core==0.2.28","langchain-community==0.2.11","langchain-experimental==0.0.64","langchain==0.2.12","langchain-core==0.2.27","langchain-cli==0.0.28","langchain-ollama==0.1.1","langchain-together==0.1.5","langchain-openai==0.1.20","langchain-mistralai==0.1.12","langchain-groq==0.1.9","langchain-fireworks==0.1.7","langchain-anthropic==0.1.22","langchain-core==0.2.26","langchain-cli==0.0.27","langchain-core==0.2.25","langchain-groq==0.1.8","langchain-fireworks==0.1.6","langchain-unstructured==0.1.1","langchain-robocorp==0.0.10","langchain-openai==0.1.19","langchain-mistralai==0.1.11","langchain-anthropic==0.1.21","langchain-core==0.2.24","langchain-unstructured==0.1.0","langchain-cli==0.0.26","langchain-milvus==0.1.3","langchain-qdrant==0.1.3","langchain-pinecone==0.1.3","langchain-couchbase==0.1.1","langchain-experimental==0.0.63","langchain-community==0.2.10","langchain==0.2.11","langchain-core==0.2.23","langchain-ollama==0.1.0","langchain-community==0.2.9","langchain==0.2.10","langchain-mongodb==0.1.7","langchain-core==0.2.22","langchain-core==0.2.21","langchain-couchbase==0.1.0","langchain-milvus==0.1.2","langchain-openai==0.1.17","langchain-pinecone==0.1.2","langchain==0.2.9","langchain-core==0.2.20","langchain==0.2.8","langchain-core==0.2.19","langchain-core==0.2.18","langchain-qdrant==0.1.2","langchain-together==0.1.4","langchain-fireworks==0.1.5","langchain-anthropic==0.1.20","langchain-openai==0.1.16","langchain-mistralai==0.1.10","langchain-core==0.2.17","langchain-core==0.2.16","langchain-core==0.2.15","langchain-openai==0.1.15","langchain-core==0.2.13","langchain-community==0.2.7","langchain==0.2.7","langchain-core==0.2.12","langchain-ibm==0.1.9","langchain-openai==0.1.14","langchain-anthropic==0.1.19","langchain-core==0.2.11","langchain-ai21==0.1.7","langchain-anthropic==0.1.18","langchain-ibm==0.1.8","langchain-mistralai==0.1.9","langchain-groq==0.1.6","langchain-fireworks==0.1.4","langchain-openai==0.1.13","langchain-anthropic==0.1.17","langchain-openai==0.1.12","langchain-chroma==0.1.2","langchain-openai==0.1.11","langchain-anthropic==0.1.16","langchain-text-splitters==0.2.2","langchain-experimental==0.0.62","langchain-community==0.2.6","langchain==0.2.6","langchain-core==0.2.10","langchain-openai==0.1.10","langchain-openai==0.1.9","langchain-core==0.2.9","langchain-core==0.2.8","langchain-experimental==0.0.61","langchain-community==0.2.5","langchain==0.2.5","langchain-core==0.2.7","langchain-qdrant==0.1.1","langchain-cli==0.0.25","langchain==0.2.4","langchain-core==0.2.6","langchain-couchbase==0.0.1","langchain-community==0.2.4","langchain==0.2.3","langchain-core==0.2.5","langchain-together==0.1.3","langchain-community==0.2.3","langchain-nomic==0.1.2","langchain-huggingface==0.0.3","langchain-ai21==0.1.6","langchain-robocorp==0.0.9.post1","langchain-mongodb==0.1.6","langchain-groq==0.1.5","langchain-milvus==0.1.1","langchain-experimental==0.0.60","langchain-community==0.2.2","langchain==0.2.2","langchain-mistralai==0.1.8","langchain-huggingface==0.0.2","langchain-text-splitters==0.2.1","langchain-core==0.2.4","langchain-anthropic==0.1.15","langchain-core==0.2.3","langchain-robocorp==0.0.9","langchain-cli==0.0.24","langchain-openai==0.1.8","langchain-core==0.2.2","langchain-milvus==0.1.0","langchain-anthropic==0.1.14rc2","langchain-cli==0.0.23","langchain-openai==0.1.8rc1","langchain-anthropic==0.1.14rc1","langchain-core==0.2.2rc1","langchain-community==0.2.1","langchain==0.2.1","langchain-robocorp==0.0.8","langchain-core==0.2.1","langchain-nomic==0.1.1","langchain-experimental==0.0.59","langchain-community==0.2.0","langchain==0.2.0","langchain-text-splitters==0.2.0","langchain-core==0.2.0","langchain-anthropic==0.1.13","langchain-upstage==0.1.5","langchain-text-splitters==0.0.2","langchain-fireworks==0.1.3","langchain-pinecone==0.1.1","langchain-exa==0.1.0","langchain-airbyte==0.1.1","langchain-ibm==0.1.7","langchain-voyageai==0.1.1","langchain-together==0.1.2","langchain-robocorp==0.0.7","langchain-qdrant==0.1.0","langchain-prompty==0.0.2","langchain-nomic==0.1.0","langchain-mongodb==0.1.5","langchain-mistralai==0.1.7","langchain-groq==0.1.4","langchain-azure-dynamic-sessions==0.1.0","langchain-anthropic==0.1.12","langchain-ai21==0.1.5","langchain-chroma==0.1.1","langchain-openai==0.1.7","langchain-mongodb==0.1.4","langchain-core==0.2.0rc1","langchain-qdrant==0.0.1","langchain-huggingface==0.0.1","langchain-prompty==0.0.1","langchain-community==0.2.0rc1","langchain-cli==0.0.22","langchain-azure-dynamic-sessions==0.1.0rc0","langchain==0.2.0rc2","langchain-upstage==0.1.4","langchain-ibm==0.1.6","langchain-robocorp==0.0.6","langchain-experimental==0.0.58","langchain-together==0.1.1","langchain-core==0.1.52","langchain-community==0.0.37","langchain-core==0.1.51","langchain-ibm==0.1.5","langchain-openai==0.1.6","langchain-core==0.1.50","langchain-mistralai==0.1.6","langchain-openai==0.1.5","langchain-ai21==0.1.4","langchain==0.1.17"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46946.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}