CVE-2026-45134
HighAdvisory
Published 13 May 2026In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.1
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 29
- of 17,781 indexed, latest versions
- Container images
- 28
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
Carried by container images the latest versions of 29 of 17,781 indexed charts deploy, on 28 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| langsmithpypi | 0.0.87, 0.1.67, 0.1.71, 0.1.93+11 more | 0.8.0 | 21 |
| langchainpypi | 0.1.6, 0.1.17, 0.1.20, 0.2.10+6 more | 0.3.30 | 16 |
| langsmithnpm | 0.1.13, 0.1.61, 0.2.13, 0.2.15+3 more | 0.6.0 | 7 |
| langchain-classicpypi | 1.0.1 | 1.0.7 | 1 |
- OSV records
- GHSA-3644-q5cj-c5c7
- Also known as
- PYSEC-2026-2555, PYSEC-2026-2560, PYSEC-2026-2582
Charts affected
29 by stars
Container images carrying it
28 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opea/ | 5c9639de61c1 | langchain langsmith | 0.3.30 0.8.0 | 2 |
| opea/ | eb746b263705 | langchain langsmith | 0.3.30 0.8.0 | 2 |
| ghcr.io/ | fd8d3e6e4cdf | langchain langsmith | 0.3.30 0.8.0 | 2 |
| aktosecurity/ | 853e37321e6e | langsmith | 0.6.0 | 1 |
| apecloud/ | 8ac9947a2c84 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| baserow/ | e0b3c8130b91 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| baserow/ | df0c42eb67e8 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| ilum/ | ce5dcdeb22ba | langsmith | 0.8.0 | 1 |
| langgenius/ | 066035f93856 | langsmith | 0.8.0 | 1 |
| library/ | 04c0fc150f3a | langsmith | 0.6.0 | 1 |
| n8nio/ | 8b39ed5a2de9 | langsmith | 0.6.0 | 1 |
| n8nio/ | dd171d45102a | langsmith | 0.6.0 | 1 |
| opea/ | 262c6048aab8 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| opea/ | f68bec6a1271 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| opea/ | 02f9e8fa5d71 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| opea/ | fe08165d7770 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| opencsghq/ | 2f03fead54db | langchain langsmith | 0.3.30 0.8.0 | 1 |
| opencsghq/ | af7191a9cf8a | langchain-classic langsmith | 1.0.7 0.8.0 | 1 |
| rocketadmin/ | 10955ef540b9 | langsmith | 0.6.0 | 1 |
| sruthitanneru/ | e565ea454ffd | langchain langsmith | 0.3.30 0.8.0 | 1 |
| tock/ | abf7880e0449 | langchain langsmith | 0.3.30 0.8.0 | 1 |
| ghcr.io/ | a2be95de450c | langchain langsmith | 0.3.30 0.8.0 | 1 |
| ghcr.io/ | 7fe76551a78e | langsmith | 0.6.0 | 1 |
| ghcr.io/ | 8c68abbe1cff | langsmith | 0.6.0 | 1 |
| ghcr.io/ | 39d48995a5bd | langchain langsmith | 0.3.30 0.8.0 | 1 |
| ghcr.io/ | e8d3f1512f06 | langsmith | 0.8.0 | 1 |
| ghcr.io/ | 45459c0910fc | langsmith | 0.8.0 | 1 |
| quay.io/ | 59fe607dfdf2 | langchain langsmith | 0.3.30 0.8.0 | 1 |