CVE-2026-54769 langroid CVE debrief

Who should care

Users of Langroid versions prior to 0.65.2, particularly those with TableChatAgent and VectorStore capabilities exposed, should be aware of this critical vulnerability and take immediate action to patch their installations. This vulnerability is particularly concerning as it allows for unauthenticated RCE on the host system, potentially leading to significant operational impact.

Technical summary

The vulnerability is caused by the incomplete scrubbing of built-ins from the globals dictionary mapping in Python's eval() function. Specifically, when TableChatAgent.pandas_eval() executes external LLM outputs natively with full_eval=True, it attempts to sandbox the execution by setting locals to an empty dictionary {}. However, this relies on an incomplete understanding of Python's execution model, as __builtins__ is not explicitly scrubbed. This allows Python to implicitly inject all built-ins during execution, granting full access to functions like __import__('os').system().

Defensive priority

High

Recommended defensive actions

• Upgrade Langroid to version 0.65.2 or later
• Restrict access to TableChatAgent and VectorStore capabilities
• Implement additional monitoring and logging to detect potential exploitation attempts
• Consider implementing compensating controls to limit the impact of a potential breach
• Review relevant system and application logs for signs of exploitation
• Perform vulnerability scanning to identify potentially affected systems
• Develop an incident response plan in case of a breach

Evidence notes

The CVE record was published on 2026-07-10T00:16:33.603Z and last modified on 2026-07-10T15:49:19.093Z. The NVD entry is currently Deferred. Evidence is limited to CVE and NVD details. Defenders should verify Langroid version usage and review TableChatAgent and VectorStore capabilities for potential exposure.

Official resources