{"id":10707,"date":"2026-02-17T10:04:55","date_gmt":"2026-02-17T10:04:55","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/02\/17\/langchain-community-ssrf-bypass-vulnerability-enables-access-to-internal-services\/"},"modified":"2026-02-17T10:04:55","modified_gmt":"2026-02-17T10:04:55","slug":"langchain-community-ssrf-bypass-vulnerability-enables-access-to-internal-services","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/02\/17\/langchain-community-ssrf-bypass-vulnerability-enables-access-to-internal-services\/","title":{"rendered":"Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services"},"content":{"rendered":"

Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

A Server\u2011Side Request Forgery (SSRF) vulnerability<\/a> has been identified in the\u00a0langchain\/community\u00a0package, affecting versions up to\u00a01.1.13.<\/p>\n

The flaw, tracked as\u00a0CVE\u20112026\u201126019, has a\u00a0moderate severity rating, with a\u00a0CVSS 3.1 score, due on its potential to expose sensitive cloud metadata and internal infrastructure.<\/p>\n

The vulnerability originates from the\u00a0RecursiveUrlLoader\u00a0class, which performs recursive web crawling. By default, it restricts crawling to the same domain using the\u00a0preventOutside\u00a0option.<\/p>\n

However, the original implementation validated URLs using JavaScript\u2019s\u00a0String.startsWith()\u00a0method, a non\u2011semantic check that allowed crafted subdomains (e.g.,\u202fhttps:\/\/example.com.attacker.com) to bypass the restriction.<\/p>\n

\n\n\n\n\n\n
CVE ID<\/th>\nCVSS Score<\/th>\nDescription<\/th>\n<\/tr>\n<\/thead>\n
CVE-2026-26019<\/strong><\/td>\n5.3 (Medium)<\/td>\nSSRF in @langchain\/community \u2264 1.1.13 via RecursiveUrlLoader<\/code>, allowing crafted URLs to access internal services and cloud metadata (e.g., 169.254.169.254). Fixed in 1.1.14.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

Additionally, the crawler failed to block access to private or reserved IP addresses, allowing attackers to direct requests to\u00a0cloud metadata endpoints (169.254.169.254),\u00a0localhost, or internal networks (10.x, 172.16.x, 192.168.x).<\/p>\n

GHSA\u2011gf3v\u2011fwqg\u20114vh7 was published on GitHub Advisory <\/a>and added to the National Vulnerability Database (NVD) last week.<\/p>\n

This flaw enabled the compromise of\u00a0IAM credentials, tokens, or internal service data in cloud\u2011hosted environments where LangChain runs with privileged network access<\/a>.<\/p>\n

An attacker who inserts malicious links into user\u2011generated or publicly crawled content could exploit this weakness to: Retrieve\u00a0cloud metadata\u00a0and credentials from AWS, GCP, or Azure.<\/p>\n

Probe or interact with\u00a0internal APIs and services\u00a0accessible only within the private network. Cause data exfiltration through redirect chains.<\/p>\n

The exploit requires minimal privileges but does depend on user interaction, such as the crawler fetching a manipulated page.<\/p>\n

LangChain has fixed this flaw in\u00a0version 1.1.14\u00a0by replacing the loose prefix check with strict\u00a0origin validation\u00a0via the\u00a0URL\u00a0API and introducing new\u00a0SSRF filters\u00a0in\u00a0@langchain\/core\/utils\/ssrf.<\/p>\n

The update now blocks requests to private, loopback, cloud metadata,<\/a> and non\u2011HTTP(S) schemes. Users unable to upgrade should avoid running RecursiveUrlLoader on\u00a0untrusted content.<\/p>\n

Isolate the component in environments that cannot reach internal networks or metadata services.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Abinaya
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services A Server\u2011Side Request Forgery (SSRF) vulnerability has been identified in the\u00a0langchain\/community\u00a0package, affecting versions up to\u00a01.1.13. The flaw, tracked as\u00a0CVE\u20112026\u201126019, has a\u00a0moderate severity rating, with a\u00a0CVSS 3.1 score, due on its potential to expose sensitive cloud metadata and internal infrastructure. The vulnerability originates from the\u00a0RecursiveUrlLoader\u00a0class, which […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,131,648],"tags":[130],"class_list":["post-10707","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-vulnerability","category-vulnerability-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/10707"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=10707"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/10707\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=10707"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=10707"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=10707"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}