{"id":"CVE-2024-8309","summary":"SQL Injection in langchain-ai/langchain","details":"A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.","aliases":["GHSA-45pg-36p6-83v9","PYSEC-2024-115","PYSEC-2026-1507"],"modified":"2026-08-12T03:51:30.171250855Z","published":"2024-10-29T12:50:13.198Z","database_specific":{"cna_assigner":"@huntr_ai","cwe_ids":["CWE-89"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8309.json"},"references":[{"type":"WEB","url":"https://huntr.com/bounties/8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8309.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8309"},{"type":"FIX","url":"https://github.com/langchain-ai/langchain/commit/c2a3021bb0c5f54649d380b42a0684ca5778c255"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/langchain-ai/langchain","events":[{"introduced":"fbeeb6da7512837f43aff415c01ee3bf8a672aeb"},{"fixed":"c2a3021bb0c5f54649d380b42a0684ca5778c255"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:langchain:langchain:0.2.5:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.2.5"},{"last_affected":"0.2.5"}]}}],"versions":["0.2.5","langchain-openai==0.1.25","langchain-core==0.2.40","langchain-community==0.2.17","langchain-openai==0.1.24","langchain-groq==0.1.10","langchain-core==0.2.39","langchain-mongodb==0.1.9","langchain-experimental==0.0.65","langchain-community==0.2.16","langchain==0.2.16","langchain-text-splitters==0.2.4","langchain-mistralai==0.1.13","langchain-core==0.2.38","langchain-ollama==0.1.3","langchain-community==0.2.15","langchain-core==0.2.37","langchain-prompty==0.0.3","langchain-core==0.2.36","langchain-ollama==0.1.2","langchain-community==0.2.14","langchain-community==0.2.13","langchain-openai==0.1.23","langchain==0.2.15","langchain-core==0.2.35","langchain-cli==0.0.30","langchain-box==0.1.0","langchain-unstructured==0.1.2","langchain-core==0.2.34","langchain-openai==0.1.22","langchain-core==0.2.33","langchain==0.2.14","langchain-core==0.2.32","langchain-core==0.2.31","langchain-anthropic==0.1.23","langchain-community==0.2.12","langchain==0.2.13","langchain-core==0.2.30","langchain-openai==0.1.21","langchain-mongodb==0.1.8","langchain-cli==0.0.29","langchain-openai==0.1.21rc2","langchain-core==0.2.29","langchain-milvus==0.1.4","langchain-openai==0.1.21rc1","langchain-core==0.2.29rc1","langchain-core==0.2.28","langchain-community==0.2.11","langchain-experimental==0.0.64","langchain==0.2.12","langchain-core==0.2.27","langchain-cli==0.0.28","langchain-ollama==0.1.1","langchain-together==0.1.5","langchain-openai==0.1.20","langchain-mistralai==0.1.12","langchain-groq==0.1.9","langchain-fireworks==0.1.7","langchain-anthropic==0.1.22","langchain-core==0.2.26","langchain-cli==0.0.27","langchain-core==0.2.25","langchain-groq==0.1.8","langchain-fireworks==0.1.6","langchain-unstructured==0.1.1","langchain-robocorp==0.0.10","langchain-openai==0.1.19","langchain-mistralai==0.1.11","langchain-anthropic==0.1.21","langchain-core==0.2.24","langchain-unstructured==0.1.0","langchain-cli==0.0.26","langchain-milvus==0.1.3","langchain-qdrant==0.1.3","langchain-pinecone==0.1.3","langchain-couchbase==0.1.1","langchain-experimental==0.0.63","langchain-community==0.2.10","langchain==0.2.11","langchain-core==0.2.23","langchain-ollama==0.1.0","langchain-community==0.2.9","langchain==0.2.10","langchain-mongodb==0.1.7","langchain-core==0.2.22","langchain-core==0.2.21","langchain-couchbase==0.1.0","langchain-milvus==0.1.2","langchain-openai==0.1.17","langchain-pinecone==0.1.2","langchain==0.2.9","langchain-core==0.2.20","langchain==0.2.8","langchain-core==0.2.19","langchain-core==0.2.18","langchain-qdrant==0.1.2","langchain-together==0.1.4","langchain-fireworks==0.1.5","langchain-anthropic==0.1.20","langchain-openai==0.1.16","langchain-mistralai==0.1.10","langchain-core==0.2.17","langchain-core==0.2.16","langchain-core==0.2.15","langchain-openai==0.1.15","langchain-core==0.2.13","langchain-community==0.2.7","langchain==0.2.7","langchain-core==0.2.12","langchain-ibm==0.1.9","langchain-openai==0.1.14","langchain-anthropic==0.1.19","langchain-core==0.2.11","langchain-ai21==0.1.7","langchain-anthropic==0.1.18","langchain-ibm==0.1.8","langchain-mistralai==0.1.9","langchain-groq==0.1.6","langchain-fireworks==0.1.4","langchain-openai==0.1.13","langchain-anthropic==0.1.17","langchain-openai==0.1.12","langchain-chroma==0.1.2","langchain-openai==0.1.11","langchain-anthropic==0.1.16","langchain-text-splitters==0.2.2","langchain-experimental==0.0.62","langchain-community==0.2.6","langchain==0.2.6","langchain-core==0.2.10","langchain-openai==0.1.10","langchain-openai==0.1.9","langchain-core==0.2.9","langchain-core==0.2.8","langchain-experimental==0.0.61","langchain-community==0.2.5","langchain==0.2.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8309.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}]}