Deserialization Vulnerability in langchain by langchain-ai
CVE-2024-5998
7.8HIGH
What is CVE-2024-5998?
The langchain product by langchain-ai contains a vulnerability within the FAISS.deserialize_from_bytes function. This flaw allows for the unsafe deserialization of untrusted data, which could potentially enable attackers to execute arbitrary commands using the os.system function. This issue poses significant security risks for users relying on this functionality in the latest version of the product.