SQL Injection Vulnerability in Langroid Framework by Langroid
CVE-2026-25879

9.8CRITICAL

Key Information:

Vendor

Langroid

Status
Langroid
Vendor
CVE Published:
1 June 2026

What is CVE-2026-25879?

The Langroid framework's SQLChatAgent allows for prompt injection manipulation, enabling attackers to influence SQL execution. Before version 0.63.0, when SQLChatAgent was configured with database roles permitting code execution or filesystem access, attackers could exploit this vulnerability to execute custom SQL commands, potentially leading to remote code execution on the database host. The issue was rectified in version 0.63.0, which implemented a default allowlist that restricts SQL statements to SELECT-only operations and blocks dangerous patterns. However, the option to restore unrestricted behavior remains for trusted deployments. For more details, refer to the security advisory.

Affected Version(s)

langroid < 0.63.0

References

https://github.com/langroid/langroid/security/advisories/...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.