CVE-2026-54771: high-severity vulnerability in langroid
Langroid: handle_message() executes user-supplied tool JSON without sender verification
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.1epss 0.4%
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application exposing a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads, even when tools are registered with `use=False, handle=True`. Version 0.65.3 fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products
langroid · langroidRelated CVEs — langroid
In the same product, most dangerous first.
CVE-2026-54769CRITICALLangroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgentEPSS 0.9%CVE-2025-46724CRITICALLangroid has a Code Injection vulnerability in TableChatAgentEPSS 0.8%CVE-2026-25481CRITICALLangroid has WAF Bypass Leading to RCE in TableChatAgentEPSS 0.7%CVE-2026-50180HIGHLangroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file readEPSS 0.7%CVE-2025-46726HIGHLangroid Vulnerable to XXE Injection via XMLToolMessageEPSS 0.7%CVE-2026-54760CRITICALLangroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file callsEPSS 0.6%