Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25481 Langroid is a framework for building large-language-model-powered applications. Prior to version 0.59.32, there is a bypass to the fix for CVE-2025-46724. TableChatAg… https://www.cve.org/CVERecord?id=CVE-2026-25481
Post summary
A brief mention of CVE-2026-25481 in the Langroid framework and a bypass to the fix for CVE-2025-46724 is noted, but no detailed vulnerability or exploit information is provided.
🔴 Langroid, Remote Code Execution, #CVE-2025-46724 (Critical) https://dailycve.com/langroid-remote-code-execution-cve-2025-46724-critical/
Post summary
The text announces a new critical remote code execution vulnerability (CVE-2025-46724) in Langroid and links to a dailycve article for details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langroid | langroid | - | - | - |