PyPI/langroid CVE-2026-25481: critical 9.6, EPSS 0.74%
Langroid has WAF Bypass Leading to RCE in TableChatAgent
Action: Upgrade langroid to 0.59.32 or later.
pip install langroid==0.59.32Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.59.32 | - |
Fixed versions
| 0.59.32 |
Sources
- osv: PYSEC-2026-383
- nvd: CVE-2026-25481
- https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj
- https://github.com/langroid/langroid/security/advisories/GHSA-x34r-63hx-w57f
- https://github.com/langroid/langroid/commit/30abbc1a854dee22fbd2f8b2f575dfdabdb603ea
- https://github.com/langroid/langroid
- https://pypi.org/project/langroid
- https://github.com/advisories/GHSA-x34r-63hx-w57f
CVE-2026-25481 · published · modified · JSON