PatchSiren cyber security CVE debrief

CVE-2026-40190 langchain-ai CVE debrief

## Summary CVE-2026-40190 is a prototype pollution vulnerability in the LangSmith JavaScript/TypeScript SDK (langsmith) prior to version 0.5.18. The SDK's internally vendored lodash `set()` utility contains an incomplete fix in its `baseAssignValue()` function, which only blocks the `__proto__` key but fails to prevent traversal via `constructor.prototype`. An attacker who controls keys in data processed by the `createAnonymizer()` API can pollute `Object.prototype`, affecting all objects in the Node.js process. ## Affected Product - **Product:** LangSmith JavaScript/TypeScript SDK (npm package `langsmith`) - **Affected Versions:** Prior to 0.5.18 - **Fixed Version:** 0.5.18 ## Root Cause The vulnerability stems from an incomplete prototype pollution mitigation in a vendored lodash utility. The `baseAssignValue()` function prevents direct `__proto__` assignment but does not block the `constructor.prototype` path, which is an alternative vector for achieving the same `Object.prototype` pollution. ## Attack Vector - **Vector:** Network-based, via attacker-controlled keys passed to the `createAnonymizer()` API - **Conditions:** Attacker must be able to influence key names in data processed by the vulnerable API - **Impact:** Object prototype pollution affecting all objects in the Node.js process, potentially leading to application logic manipulation, denial of service, or indirect code execution ## CVSS Assessment - **Score:** 5.6 (Medium) - **Vector:** CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L The High Attack Complexity (AC:H) reflects the need for the attacker to control specific input keys; the Network attack vector (AV:N) with No privileges required (PR:N) and No user interaction (UI:N) indicates the vulnerability is remotely exploitable under the right conditions. ## Timeline - **CVE Published:** 2026-04-10 - **CVE Last Modified:** 2026-05-29 ## Recommended Actions 1. **Upgrade immediately** to langsmith SDK version 0.5.18 or later 2. **Audit applications** using `createAnonymizer()` for untrusted input handling 3. **Implement input validation** on keys passed to SDK methods as defense-in-depth 4. **Monitor for anomalous behavior** in Node.js