CVE-2025-46725

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46725
Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the host system. Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6 Patch
https://github.com/langroid/langroid/security/advisories/GHSA-22c2-9gwg-mj59 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*
History

13 Aug 2025, 16:37

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
References () https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6 - () https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6 - Patch
References () https://github.com/langroid/langroid/security/advisories/GHSA-22c2-9gwg-mj59 - () https://github.com/langroid/langroid/security/advisories/GHSA-22c2-9gwg-mj59 - Vendor Advisory
Summary
  • (es) Langroid es un framework de Python para crear aplicaciones basadas en modelos de lenguaje grandes (LLM). Antes de la versión 0.53.15, `LanceDocChatAgent` utilizaba la función eval() de Pandas mediante `compute_from_docs()`. Como resultado, un atacante podría hacer que el agente ejecute comandos maliciosos a través de `QueryPlan.dataframe_calc]`, comprometiendo así el sistema host. Langroid 0.53.15 depura la entrada a la función afectada de forma predeterminada para abordar los vectores de ataque más comunes y añadió varias advertencias sobre este comportamiento riesgoso en la documentación del proyecto.
CPE cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*
First Time Langroid
Langroid langroid

20 May 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-20 18:15

Updated : 2025-08-13 16:37

NVD link : CVE-2025-46725

Mitre link : CVE-2025-46725

CVE.ORG link : CVE-2025-46725

JSON object : View

Products Affected

langroid

  • langroid
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')