Dashboard / CVE-2026-41488

CVE-2026-41488

LOW
INFO Priority: 0.00 BB Relevance: 46/100
Published: 2026-04-24 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: Required
S: Unchanged
C: Low
I: None
A: None

Description

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's _url_to_size() helper (used by get_num_tokens_from_messages for image token counting) validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled hostname could resolve to a public IP during validation and then to a private/localhost IP during the actual fetch.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
langchain langchain-openai < 1.1.14

References & Advisories (1)

Bug Bounty Relevance

46 / 100
✓ Network accessible
✓ No authentication

CVSS Score

3.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.16%
Raw Score 0.001580
Percentile 4.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00158
2026-10-28
0.00158

Intelligence Sources

nvd ref →

External Links