{"id":"CVE-2025-2828","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-2828","generatedAt":"2026-11-02T17:37:10.979Z","title":"A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27.","description":"A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does not enforce restrictions on requests to remote internet addresses, allowing it to also access local addresses. As a result, an attacker could exploit this flaw to perform port scans, access local services, retrieve instance metadata from cloud environments (e.g., Azure, AWS), and interact with servers on the local network. This issue has been fixed in version 0.0.28.","published":"2025-06-23T21:15:25.000Z","lastModified":"2026-06-17T09:07:41.000Z","status":"Analyzed","sourceIdentifier":"security@huntr.dev","cvss":{"version":"3.1","score":10,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-918"],"affected":["langchain/langchain"],"epss":{"score":0.21019,"percentile":0.9757,"date":"2026-11-01","history":[{"date":"2026-09-24","score":0.21019,"percentile":0.97488}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 21.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://github.com/langchain-ai/langchain/commit/e188d4ecb085d4561a0be3c583d26aa9c2c3283f","tags":["Patch"],"source":"security@huntr.dev"},{"url":"https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc","tags":["Exploit","Third Party Advisory"],"source":"security@huntr.dev"},{"url":"https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc","tags":["Exploit","Third Party Advisory"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-2828","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}