CVE-2025-46726

CRITICAL

langroid < 0.53.4 - XML External Entity Injection via XMLToolMessage

Title source: llm

Description

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue.

References (3)

Core 3

Core References

Exploit, Vendor Advisory x_refsource_confirm

https://github.com/langroid/langroid/security/advisories/GHSA-pw95-88fg-3j6f

Patch x_refsource_misc

https://github.com/langroid/langroid/commit/36e7e7db4dd1636de225c2c66c84052b1e9ac3c3

View Patch ZIP pw:eip

Product x_refsource_misc

https://github.com/langroid/langroid/blob/df6227e6c079ec22bb2768498423148d6685acff/langroid/agent/xml_tool_message.py#L51-L52

View Writeup ZIP pw:eip

Scores

CVSS v3 9.1

EPSS 0.0052

EPSS Percentile 40.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-611

Status published

Products (2)

langroid/langroid < 0.53.4

pypi/langroid 0 - 0.53.4PyPI

Published May 05, 2025

Tracked Since Feb 18, 2026