Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2024-28088 PoC — LangChain 安全漏洞

Source
https://github.com/levpachmanov/cve-2024-28088-poc
Associated Vulnerability
Title:LangChain 安全漏洞 (CVE-2024-28088)
Description:LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)
File Snapshot

 [4.0K]  /data/pocs/0d35032d852c09789d372a296c285f85027910ee
├── [1.0K]  poc.py
├── [ 476]  poc_rce.json
├── [  20]  pwnd.html
└── [ 708]  requirements.txt

0 directories, 4 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →