CVE-2023-36281
Description
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to subclasses or a template.
NVD
Severity: CRITICAL
CVE ID: CVE-2023-36281
CVSS Score: 9.8
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Proof Of Concept
tagomaru
PoC of CVE-2023-36281
Refrence: GitHub
miguelc49
Refrence: GitHub
miguelc49
Refrence: GitHub