CVE-2026-72848

Name of the Vulnerable Software and Affected Versions langchain-community (affected versions not specified)

Description The SitemapLoader.parse sitemap function in langchain community/document loaders/sitemap.py fails to apply the restrict to same domain control to nested sitemap entries. While leaf URL entries are filtered, nested sitemap elements are passed directly to the scrape all() function, which triggers an aiohttp GET request without domain comparison or checks for private, loopback, or link-local destinations. This allows an attacker to influence an ingested sitemap to point to internal addresses, leading to Server-Side Request Forgery (SSRF), where internal responses are fetched and disclosed to the caller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.