CVE-2024-28088
HIGHlangchain < 0.1.12 and langchain-core < 0.1.30 - Path Traversal via load_chain Path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-28088. PoCs published by levpachmanov.
AI-analyzed exploit summary This PoC exploits a path traversal vulnerability in LangChain's `load_chain` function to achieve remote code execution (RCE) by loading a malicious chain configuration file. It also demonstrates theft of OpenAI API keys via a Flask server mimicking an OpenAI endpoint.
Description
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)
Exploits (1)
This PoC exploits a path traversal vulnerability in LangChain's `load_chain` function to achieve remote code execution (RCE) by loading a malicious chain configuration file. It also demonstrates theft of OpenAI API keys via a Flask server mimicking an OpenAI endpoint.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N