Description

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_tokens_from_messages() method fetches arbitrary image_url values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Request Forgery (SSRF) attacks by providing malicious image URLs in user input. This vulnerability is fixed in 1.2.11.

INFO

Published Date :

2026-02-10T21:51:07.741Z

Last Modified :

2026-02-11T21:26:34.029Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-26013 vulnerability.

Vendors Products
Langchain
  • Langchain Core
Langchain-ai
  • Langchain
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-26013.

URL Resource
https://github.com/langchain-ai/langchain/commit/2b4b1dc29a833d4053deba4c2b77a3848c834565 cve-icon cve-icon cve-icon
https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.11 cve-icon cve-icon cve-icon
https://github.com/langchain-ai/langchain/security/advisories/GHSA-2g6r-c272-w58r cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-26013 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-26013 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact