CVE-2026-105799
Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: GitHub, Inc.

Description
LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker's intended scope. This issue is fixed in version 1.1.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-105799
EUVD
EUVD-2026-93431

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
langchain-ai langchainjs < 1.1.1
@langchain redis < 1.1.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-943 The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

LangChain is a framework for building applications powered by large language models. The vulnerability in @langchain/redis before version 1.1.1 involves improper escaping of attacker-controlled values in RediSearch TAG and TEXT filters. This allows attackers to inject RediSearch syntax, altering or broadening search queries. If an application uses these filters as boundaries for tenant or document access, the modified query could expose documents outside the intended scope.

Detection Guidance

To detect this vulnerability, check if your system uses @langchain/redis version prior to 1.1.1. Inspect package.json or run npm list @langchain/redis. If vulnerable, review applications using RediSearch TAG or TEXT filters for improper input sanitization.

Impact Analysis

If you use @langchain/redis prior to version 1.1.1, an attacker could manipulate search filters to access unauthorized documents. This could lead to data leaks, privilege escalation, or exposure of sensitive information if the application relies on these filters for access control.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by enabling unauthorized access to personal or health data. Unauthorized exposure of such data may result in legal penalties, loss of trust, and failure to meet regulatory standards for data protection and access controls.

Mitigation Strategies

Update @langchain/redis to version 1.1.1 or later to address the injection vulnerability in RediSearch filters.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105799. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart