{"id":"CVE-2025-68665","summary":"LangChain serialization injection vulnerability enables secret extraction","details":"LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain versions 0.3.37 and 1.2.3, a serialization injection vulnerability exists in LangChain JS's toJSON() method (and subsequently when string-ifying objects using JSON.stringify(). The method did not escape objects with 'lc' keys when serializing free-form data in kwargs. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in @langchain/core versions 0.3.80 and 1.1.8, and langchain versions 0.3.37 and 1.2.3","aliases":["GHSA-r399-636x-v7f6"],"modified":"2026-10-24T02:31:20.559043492Z","published":"2025-12-23T22:56:04.837Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68665.json","unresolved_ranges":[{"extracted_events":[{"range":[{"introduced":"@langchain/core \u003e= 1.0.0, \u003c 1.1.8"},{"last_affected":"@langchain/core \u003e= 1.0.0, \u003c 1.1.8"},{"introduced":"langchain \u003e= 1.0.0, \u003c 1.2.3"},{"last_affected":"langchain \u003e= 1.0.0, \u003c 1.2.3"},{"introduced":"langchain \u003c 0.3.37"},{"last_affected":"langchain \u003c 0.3.37"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"}]}]},"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcore%401.1.8"},{"type":"WEB","url":"https://github.com/langchain-ai/langchainjs/releases/tag/langchain%401.2.3"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68665.json"},{"type":"ADVISORY","url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-r399-636x-v7f6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68665"},{"type":"FIX","url":"https://github.com/langchain-ai/langchainjs/commit/e5063f9c6e9989ea067dfdff39262b9e7b6aba62"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/langchain-ai/langchainjs","events":[{"introduced":"2954498b052b3ebc30b8ff37a11db1953f4ae0f0"},{"fixed":"e5063f9c6e9989ea067dfdff39262b9e7b6aba62"},{"fixed":"de32b32b0b4bbd4ce2445e3044dd8011b3a78b30"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"@langchain/core \u003c 0.3.80"},{"last_affected":"@langchain/core \u003c 0.3.80"}]},{"range":[{"fixed":"e5063f9c6e9989ea067dfdff39262b9e7b6aba62"}],"source":"REFERENCES_COMMIT"},{"original_tag":"langchain@1.2.3","range":[{"fixed":"de32b32b0b4bbd4ce2445e3044dd8011b3a78b30"}],"source":"REFERENCES_TAG"}]}}],"versions":["@langchain/core \u003c 0.3.80"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68665.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}]}