CVE-2023-36188

Name of the Vulnerable Software and Affected Versions langchain version 0.0.64

Description The issue allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. This enables the attacker to run malicious code, potentially leading to system compromise.

Recommendations For langchain version 0.0.64, consider disabling the exec method or restricting access to the PALChain parameter until a patch is available. As a temporary workaround, avoid using the PALChain parameter in the affected exec method to minimize the risk of exploitation.