CVE-2025-65106 - CVE House
Back to Database
Status published High CVE-2025-65106

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

Vulnerability Description

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-65106

Credits & Attribution

No credits recorded in the NVD database.

References

More from langchain-ai

View All →
CVE-2025-8709
SQL Injection in langchain-ai/langchain
High 7.3
CVE-2025-6985
XXE Vulnerability in langchain-ai/langchain
High 7.5
CVE-2025-6984
Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain
High 7.5
CVE-2025-68665
LangChain serialization injection vulnerability enables secret extraction
High 8.6
CVE-2025-68664
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Critical 9.3

Affected Vendor

langchain-ai

View all reports →

Affected Software

langchain
Vulnerable Versions:
>= 1.0.0, < 1.0.7, < 0.3.80

Timeline

Official Publish: November 21st, 2025
Last Modified: November 21st, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-1336

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.