Tools AI Risk Radar ai-incident-0154
Incident record
LangChain fixes Redis filters that could expose extra documents
- Severity
- Low
- Status
- Patched
- Type
- Infra Vuln
- Target
- @langchain/redis
- Actor
- researcher
- CVE
- CVE-2026-105799
What happened
Attacker-controlled search-filter values could alter a Redis query and widen its results. Cross-customer exposure was possible where an application relied on that filter to enforce document access.
@langchain/redis: affected <= 1.1.0; fixed in 1.1.1. The date shown is the maintainer’s original disclosure date.
Sources
- Primary disclosuregithub.com/langchain-ai/langchainjs/security/advisories/GHSA…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026