{"id":"CVE-2026-105799","summary":"LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values","details":"LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker's intended scope. This issue is fixed in version 1.1.1.","aliases":["GHSA-5x6v-p487-7qh2"],"modified":"2026-10-07T02:47:30.843306905Z","published":"2026-10-06T14:45:38.154Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-943"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105799.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105799.json"},{"type":"FIX","url":"https://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7"},{"type":"FIX","url":"https://github.com/langchain-ai/langchainjs/pull/10701"},{"type":"WEB","url":"https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1"},{"type":"ADVISORY","url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105799"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/langchain-ai/langchainjs","events":[{"introduced":"0"},{"fixed":"862da5008f5278ac8a82d1fe383df975b83bad59"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.1.1"}],"source":"AFFECTED_FIELD"}}],"versions":["@langchain/google-webauth@1.0.4","@langchain/google-vertexai@1.0.4","@langchain/google-vertexai-web@1.0.4","@langchain/google-gauth@1.0.4","@langchain/google-common@1.0.4","@langchain/yandex@1.0.1","@langchain/xai@1.0.2","@langchain/weaviate@1.0.1","@langchain/textsplitters@1.0.1","@langchain/tavily@1.0.1","@langchain/redis@1.0.1","@langchain/qdrant@1.0.1","@langchain/pinecone@1.0.1","@langchain/ollama@1.0.2","@langchain/nomic@1.0.1","@langchain/mongodb@1.0.1","@langchain/mixedbread-ai@1.0.1","@langchain/mistralai@1.0.1","@langchain/mcp-adapters@1.0.1","@langchain/groq@1.0.2","@langchain/google-cloud-sql-pg@1.0.1","@langchain/exa@1.0.1","@langchain/deepseek@1.0.2","@langchain/cohere@1.0.1","@langchain/cloudflare@1.0.1","@langchain/cerebras@1.0.1","@langchain/baidu-qianfan@1.0.1","@langchain/azure-dynamic-sessions@1.0.1","@langchain/azure-cosmosdb@1.1.0","@langchain/anthropic@1.1.1","langchain@1.0.6","@langchain/google-webauth@1.0.3","@langchain/google-vertexai@1.0.3","@langchain/google-vertexai-web@1.0.3","@langchain/google-genai@1.0.3","@langchain/google-gauth@1.0.3","@langchain/google-common@1.0.3","@langchain/google-webauth@1.0.2","@langchain/google-vertexai@1.0.2","@langchain/google-vertexai-web@1.0.2","@langchain/google-genai@1.0.2","@langchain/google-gauth@1.0.2","@langchain/google-common@1.0.2","langchain@1.0.5","@langchain/openai@1.1.2","@langchain/community@1.0.4","@langchain/classic@1.0.4","@langchain/aws@1.0.2","@langchain/anthropic@1.1.0","langchain==1.0.4","@langchain/openai==1.1.0","@langchain/ollama==1.0.1","@langchain/core==1.0.4","@langchain/community==1.0.2","@langchain/classic==1.0.2","@langchain/aws==1.0.1","langchain==1.0.3","@langchain/core==1.0.3","langchain==1.0.2","@langchain/core==1.0.2","@langchain/community==1.0.1","@langchain/classic==1.0.1","langchain==1.0.1","langchain==1.0.0","@langchain/yandex==1.0.0","@langchain/xai==1.0.0","@langchain/weaviate==1.0.0","@langchain/vertexai==1.0.0","@langchain/vertexai-web==1.0.0","@langchain/textsplitters==1.0.0","@langchain/tavily==1.0.0","@langchain/redis==1.0.0","@langchain/qdrant==1.0.0","@langchain/pinecone==1.0.0","@langchain/openai==1.0.0","@langchain/ollama==1.0.0","@langchain/nomic==1.0.0","@langchain/mongodb==1.0.0","@langchain/mixedbread-ai==1.0.0","@langchain/mistralai==1.0.0","@langchain/mcp-adapters==1.0.0","@langchain/groq==1.0.0","@langchain/google-webauth==1.0.0","@langchain/google-genai==1.0.0","@langchain/google-gauth==1.0.0","@langchain/google-common==1.0.0","@langchain/google-cloud-sql-pg==1.0.0","@langchain/exa==1.0.0","@langchain/deepseek==1.0.0","@langchain/core==1.0.1","@langchain/core==1.0.0","@langchain/community==1.0.0","@langchain/cohere==1.0.0","@langchain/cloudflare==1.0.0","@langchain/classic==1.0.0","@langchain/cerebras==1.0.0","@langchain/baidu-qianfan==1.0.0","@langchain/azure-dynamic-sessions==1.0.0","@langchain/azure-cosmosdb==1.0.0","@langchain/aws==1.0.0","@langchain/anthropic==1.0.0","langchain==0.3.35","@langchain/redis==0.1.3","@langchain/openai==0.6.14","@langchain/mistralai==0.2.2","@langchain/core==0.3.78","@langchain/community==0.3.57","@langchain/cloudflare==0.1.2","@langchain/azure-cosmosdb==0.2.10","@langchain/anthropic==0.3.29","@langchain/core==0.3.77","langchain==0.3.34","@langchain/weaviate==0.2.3","@langchain/openai==0.6.12","@langchain/groq==0.2.4","@langchain/google-webauth==0.2.18","@langchain/google-vertexai==0.2.18","@langchain/google-vertexai-web==0.2.18","@langchain/google-genai==0.2.18","@langchain/google-gauth==0.2.18","@langchain/google-common==0.2.18","@langchain/google-cloud-sql-pg==0.0.2","@langchain/core==0.3.76","@langchain/community==0.3.56","@langchain/cerebras==0.0.4","@langchain/azure-cosmosdb==0.2.9","@langchain/anthropic==0.3.28","@langchain/core==0.3.75","@langchain/community==0.3.55","@langchain/anthropic==0.3.27","langchain==0.3.33","@langchain/core==0.3.74","langchain==0.3.32","@langchain/redis==0.1.2","@langchain/openai==0.6.10","@langchain/ollama==0.2.4","@langchain/google-webauth==0.2.17","@langchain/google-vertexai==0.2.17","@langchain/google-vertexai-web==0.2.17","@langchain/google-vertexai","@langchain/google-genai==0.2.17","@langchain/google-gauth==0.2.17","@langchain/google-common==0.2.17","@langchain/core==0.3.73","@langchain/community==0.3.54","@langchain/cloudflare==0.1.1","@langchain/aws==0.1.15","@langchain/core==0.3.70","@langchain/core==0.3.69","@langchain/openai==0.6.6","@langchain/core==0.3.68","@langchain/openai==0.6.5","v1-head","@langchain/anthropic==0.3.25","@langchain/core==0.3.64","@langchain/openai==0.5.17","@langchain/core==0.3.59","0.3.54","@langchain/core==0.3.49","0.3.24","0.3.23","langchain==0.3.22","0.3.19","@langchain/core-0.3.22","0.3.5","0.3.2","0.3.1","0.3.0","0.2.19","0.2.18","0.2.16","0.2.15","0.2.14","0.2.13","0.2.11","0.2.10","0.2.9","0.2.8","0.2.7","0.2.6","0.2.5","0.2.4","0.2.3","0.2.2","0.2.1","0.2.0@next","0.1.36","0.1.35","0.1.34","0.1.33","0.1.32","0.1.31","0.1.30","0.1.29","0.1.28","0.1.27","0.1.26","0.1.22","0.1.21","0.1.20","0.1.19","0.1.18","0.1.16","0.1.15","0.1.14","0.1.13","0.1.12","0.1.11","0.1.10","0.1.9","0.1.8","0.1.7","0.1.6","0.1.5","0.1.4","0.1.3","0.1.2","0.1.1","0.1.0","0.0.214","0.0.213","0.0.212","0.0.211","0.0.210","0.0.209","0.0.208","0.0.207","0.0.206","0.0.205","0.0.204","0.0.203","0.0.202","0.0.201","0.0.200","0.0.199","0.0.198","0.0.197","0.0.196","0.0.195","0.0.194","0.0.193","0.0.192","0.0.191","0.0.190","0.0.189","0.0.188","0.0.187","0.0.186","0.0.185","0.0.184","0.0.183","0.0.182","0.0.181","0.0.180","0.0.179","0.0.178","0.0.177","0.0.176","0.0.175","0.0.174","0.0.173","0.0.172","0.0.171","0.0.170","0.0.169","0.0.168","0.0.167","0.0.166","0.0.165","0.0.164","0.0.163","0.0.162","0.0.161","0.0.160","0.0.159","0.0.158","0.0.157","0.0.156","0.0.155","0.0.154","0.0.153","0.0.152","0.0.151","0.0.150","0.0.149","0.0.148","0.0.147","0.0.146","0.0.145","0.0.144","0.0.143","0.0.141","0.0.140","0.0.139","0.0.138","0.0.137","0.0.136","0.0.135","0.0.134","0.0.133","0.0.132","0.0.131","0.0.130","0.0.129","0.0.128","0.0.127","0.0.126","0.0.125","0.0.124","0.0.123","0.0.122","0.0.121","0.0.120","0.0.119","0.0.118","0.0.117","0.0.116","0.0.115","0.0.114","0.0.113","0.0.112","0.0.111","0.0.110","0.0.109","0.0.108","0.0.107","0.0.106","0.0.105","0.0.104","0.0.103","0.0.102","0.0.101","0.0.100","0.0.98","0.0.97","0.0.92","0.0.91","0.0.90","0.0.89","0.0.88","0.0.87","0.0.86","0.0.85","0.0.84","0.0.83"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105799.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}]}