Server-Side Request Forgery in Langchain Community Product
CVE-2026-72848

7.7HIGH

Key Information:

Vendor

Langchain-ai

Status
Langchain-community
Vendor
CVE Published:
20 August 2026

What is CVE-2026-72848?

The SitemapLoader in Langchain Community's document loaders has a vulnerability where it only applies the restrict_to_same_domain control to leaf URL entries. This weakness allows an attacker to manipulate nested sitemap entries to direct HTTP requests to internal addresses, bypassing intended domain restrictions. The issue arises when unfiltered URLs from nested sitemaps are processed, enabling access to internal content and potentially exposing sensitive data. Proper validation of all URL entries is crucial to prevent information leakage and maintain the security of the application.

Affected Version(s)

langchain-community 0 <= 0.4.2

References

https://github.com/langchain-ai/langchain/issues/38814
issue-tracking
https://github.com/langchain-ai/langchain-community/blob/...
technical-description
https://github.com/langchain-ai/langchain-community
product

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

geo-chen
.