CVE-2026-97869

Awaiting Analysis Awaiting Analysis - Queue

Deserialization Flaw in LangChain4j Agentic

Publication date: 2026-09-25

Last updated on: 2026-09-28

Assigner: VulDB

Description

A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson of the file AgenticScopeJsonSerializationIT.java of the component LangChain4j-agentic. This manipulation causes deserialization. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been published and may be used. Upgrading to version 1.5.3-beta11, 1.11.10-beta19 and 1.18.1-beta28 is able to resolve this issue. Upgrading the affected component is advised. The project maintainer kindly explains: "The issue was reported to us privately on 23 July 2026 and fixed in releases published on 29 July 2026. It is tracked as GHSA-gmwr-7wmf-mrjm. Exploitation requires an application to have enabled AgenticScope persistence, which is opt-in, and an attacker who can already write to that store. All maintained release lines have been patched."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-28

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-97869

EUVD

EUVD-2026-87114

Affected Vendors & Products

Vendor	Product	Version / Range
langchain4j	langchain4j	to 1.18.1-beta27 (inc)
langchain4j	langchain4j	1.5.3-beta11
langchain4j	langchain4j	1.11.10-beta19
langchain4j	langchain4j	1.18.1-beta28

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability is a deserialization flaw in langchain4j versions up to 1.5.3-beta10, 1.11.10-beta18, and 1.18.1-beta27. It affects the AgenticScopeSerializer.fromJson function in the LangChain4j-agentic component. An attacker can exploit this to perform remote deserialization attacks if they have write access to the AgenticScope persistence store, which is opt-in.

Detection Guidance

Detection requires checking if AgenticScope persistence is enabled in your langchain4j application and if an attacker has write access to the persistence store. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code or cause denial of service by manipulating deserialized data. However, exploitation requires the attacker to already have write access to the AgenticScope persistence store, which is not enabled by default.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards. The flaw requires specific conditions to be exploited, including enabled AgenticScope persistence and attacker access to write to the store. No evidence suggests it leads to unauthorized data exposure or processing violations under these regulations.

Mitigation Strategies

Upgrade langchain4j to version 1.5.3-beta11, 1.11.10-beta19, or 1.18.1-beta28 or later. Disable AgenticScope persistence if not required. Ensure the persistence store is not writable by unauthorized users.

Hi! I’m here to help you understand CVE-2026-97869. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70