Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-26013

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_tokens_from_messages() method fetches arbitrary image_url values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Request Forgery (SSRF) attacks by providing malicious image URLs in user input. This vulnerability is fixed in 1.2.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

langchain-ai langchain

  • < 1.2.11affected

References