Platform
python
Component
langroid
Fixed in
0.59.33
0.59.32
CVE-2026-25481 represents a critical Remote Code Execution (RCE) vulnerability affecting Langroid versions up to 0.9.5. This flaw stems from a bypass of a previous fix (CVE-2025-46724) within the TableChatAgent, enabling attackers to execute arbitrary code. The vulnerability is due to flawed input validation in the pandas_eval tool, allowing malicious expressions to be evaluated, and is addressed in version 0.59.32.
The impact of CVE-2026-25481 is severe. An attacker can exploit this vulnerability to execute arbitrary code on the system running Langroid. This could lead to complete system compromise, including data theft, modification, or destruction. The ability to bypass the existing WAF highlights the sophistication of the attack vector. Successful exploitation could allow an attacker to gain persistent access to the system, potentially moving laterally to other resources within the network. This vulnerability shares similarities with other code injection flaws where whitelisted functions are chained to gain access to restricted functionalities.
CVE-2026-25481 was publicly disclosed on 2026-02-02. The vulnerability's severity is CRITICAL (CVSS score 9.5). Public proof-of-concept (PoC) code is likely to emerge given the bypass nature of the vulnerability. It is recommended to monitor security advisories and threat intelligence feeds for any indications of active exploitation. The vulnerability is not currently listed on the CISA KEV catalog.
Exploit Status
EPSS
0.02% (5% percentile)
CISA SSVC
The primary mitigation for CVE-2026-25481 is to immediately upgrade Langroid to version 0.59.32 or later. If upgrading is not immediately feasible, consider implementing stricter input validation on the TableChatAgent's input. While a direct WAF bypass is present, adding additional filtering rules to block suspicious dunder attribute access (e.g., init, globals, builtins) might offer a temporary layer of defense. Monitor system logs for any unusual activity related to the pandas_eval tool or TableChatAgent. After upgrading, confirm the fix by attempting to trigger the vulnerability with known malicious input and verifying that it is blocked.
Update the Langroid library to version 0.59.32 or higher. This will fix the WAF bypass vulnerability that allows remote code execution. The update can be performed using the Python package manager, pip, by running the command: `pip install --upgrade langroid`.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2026-25481 is a CRITICAL Remote Code Execution vulnerability in Langroid versions up to 0.9.5, allowing attackers to execute arbitrary code due to a bypass of a previous fix.
You are affected if you are using Langroid version 0.9.5 or earlier. Immediately upgrade to version 0.59.32 or later to mitigate the risk.
Upgrade Langroid to version 0.59.32 or later. If immediate upgrade is not possible, implement stricter input validation on the TableChatAgent.
While active exploitation is not confirmed, the CRITICAL severity and bypass nature of the vulnerability suggest a high likelihood of exploitation. Monitor for any suspicious activity.
Refer to the Langroid project's official security advisories and release notes for the most up-to-date information: [https://github.com/langroid-ai/langroid](https://github.com/langroid-ai/langroid)
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.
Upload your requirements.txt file and we'll tell you instantly if you're affected.