LangChain LangChain 未授权 反序列化漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-68664
• https://github.com/langchain-ai/langchain/security/advisories/GHSA-c67j-w6g6-q2cm
• https://www.gm7.org/archives/23468
• https://avd.aliyun.com/detail?id=AVD-2025-68664
• https://net.njfu.edu.cn/2026/0108/c1363a68622/page.htm
• https://zhuanlan.zhihu.com/p/1987941795108245749
• https://orca.security/resources/blog/cve-2025-68664-langchain-serialization-flaw/
• https://www.cncso.com/open-source-llm-framework-langchain-serialization-injection.html
• https://blog.csdn.net/u8v9w0x1y/article/details/155634391
• https://www.upwind.io/feed/cve-2025-68664-langchain-serialization-injection
• https://cn-sec.com/archives/4879946.html
• https://www.venustech.com.cn/new_type/aqtg/20251225/29040.html

Related Vulnerabilities

• PoCLangChain 序列化注入漏洞(CVE-2025-68664)
• LangChain SQL注入漏洞