{"id":74118,"date":"2025-11-22T01:46:32","date_gmt":"2025-11-21T22:16:32","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-65106-langchain-vulnerable-to-template-injection-via-attribute-access-in-prompt-templates\/"},"modified":"2025-11-22T01:46:32","modified_gmt":"2025-11-21T22:16:32","slug":"cve-2025-65106-langchain-vulnerable-to-template-injection-via-attribute-access-in-prompt-templates","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-65106-langchain-vulnerable-to-template-injection-via-attribute-access-in-prompt-templates\/","title":{"rendered":"CVE-2025-65106 &#8211; LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates"},"content":{"rendered":"<p>CVE ID : CVE-2025-65106<\/p>\n<p>Published :  Nov. 21, 2025, 10:16 p.m. | 59\u00a0minutes ago<\/p>\n<p>Description : LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain&#8217;s prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.<\/p>\n<p>Severity: 8.3 | HIGH<\/p>\n<p>Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-65106 Published : Nov. 21, 2025, 10:16 p.m. | 59\u00a0minutes ago Description : LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain&#8217;s prompt template system that allows attackers to access Python object internals through template &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-74118","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/74118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=74118"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/74118\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=74118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=74118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=74118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}