Langroid présente un contournement de WAF menant à une exécution de code à distance (RCE) dans TableChatAgent

The impact of CVE-2026-25481 is severe. An attacker can exploit this vulnerability to execute arbitrary code on the system running Langroid. This could lead to complete system compromise, including data theft, modification, or destruction. The ability to bypass the existing WAF highlights the sophistication of the attack vector. Successful exploitation could allow an attacker to gain persistent access to the system, potentially moving laterally to other resources within the network. This vulnerability shares similarities with other code injection flaws where whitelisted functions are chained to gain access to restricted functionalities.

Organizations deploying Langroid agents, particularly those using the TableChatAgent feature, are at risk. Environments where Langroid is integrated with sensitive data or critical infrastructure are especially vulnerable. Users relying on older, unpatched versions of Langroid are also at significant risk.

• python / server:

import os
import subprocess

def check_langroid_version():
    try:
        result = subprocess.check_output(['pip', 'show', 'langroid'], stderr=subprocess.STDOUT, text=True)
        for line in result.splitlines():
            if 'Version:' in line:
                version = line.split('Version:')[1].strip()
                if version <= '0.9.5':
                    return True
                else:
                    return False
    except FileNotFoundError:
        return False

if check_langroid_version():
    print("Langroid version is vulnerable.")
else:
    print("Langroid version is not vulnerable.")

• linux / server:

ps aux | grep -i langroid
journalctl -u langroid | grep -i "pandas_eval"

1. 2026-02-02Disclosure

   disclosure

2. 2026-02-02Patch

   patch

1. Réservé2026-02-02
2. Publiée2026-02-02
3. Modifiée2026-02-05
4. EPSS mis à jour2026-03-23

The primary mitigation for CVE-2026-25481 is to immediately upgrade Langroid to version 0.59.32 or later. If upgrading is not immediately feasible, consider implementing stricter input validation on the TableChatAgent's input. While a direct WAF bypass is present, adding additional filtering rules to block suspicious dunder attribute access (e.g., init, globals, builtins) might offer a temporary layer of defense. Monitor system logs for any unusual activity related to the pandas_eval tool or TableChatAgent. After upgrading, confirm the fix by attempting to trigger the vulnerability with known malicious input and verifying that it is blocked.