SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain
Published Jun 23, 2025
10.0
CRITICALCVSS 3.1
EPSS 21.02%
Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does not enforce restrictions on requests to remote internet addresses, allowing it to also access local addresses. As a result, an attacker could exploit this flaw to perform port scans, access local services, retrieve instance metadata from cloud environments (e.g., Azure, AWS), and interact with servers on the local network. This issue has been fixed in version 0.0.28.
Affected products
-
Affected
- ≥ unspecified, < 0.0.28
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Langchain-AI | Langchain-Ai/langchain | unknown | Affected
|
No data.
OpenShift Lightspeed
openshift-lightspeed/lightspeed-service-api-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/de-minimal-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/de-minimal-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/ee-supported-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/ee-supported-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/lightspeed-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-24/platform-resource-runner-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/ansible-dev-tools-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/de-minimal-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/de-minimal-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/ee-supported-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/ee-supported-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/lightspeed-chatbot-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/lightspeed-rhel8
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/platform-resource-runner-rhel8
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-aws-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-azure-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-azure-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-gcp-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-intel-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/bootc-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/disk-image-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/granite-3.1-8b-lab-v2.1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/granite-3.1-8b-starter-v2.1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-amd-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-intel-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/instructlab-nvidia-rhel9
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/knowledge-adapter-v3
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/mixtral-8x7b-instruct-v0-1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-granite-3-1-8b-lab-v2
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-granite-3-1-8b-lab-v2-1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-granite-3-1-8b-starter-v2
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-granite-3-1-8b-starter-v2-1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-knowledge-adapter-v3
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-mixtral-8x7b-instruct-v0-1
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-prometheus-8x7b-v2-0
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-skills-adapter-v3
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/modelcar-snowflake-arctic-embed-l-v2.0
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/prometheus-8x7b-v2-0
Not affected
Red Hat Enterprise Linux AI (RHEL AI)
rhelai1/skills-adapter-v3
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| OpenShift Lightspeed | openshift-lightspeed/lightspeed-service-api-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/de-minimal-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/de-minimal-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/ee-supported-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/ee-supported-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/lightspeed-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-24/platform-resource-runner-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/ansible-dev-tools-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/de-minimal-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/de-minimal-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/ee-supported-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/ee-supported-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/lightspeed-chatbot-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/lightspeed-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/platform-resource-runner-rhel8 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-aws-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-azure-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-azure-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-gcp-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-intel-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/bootc-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/disk-image-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/granite-3.1-8b-lab-v2.1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/granite-3.1-8b-starter-v2.1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-amd-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-intel-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/instructlab-nvidia-rhel9 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/knowledge-adapter-v3 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/mixtral-8x7b-instruct-v0-1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-granite-3-1-8b-lab-v2 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-granite-3-1-8b-lab-v2-1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-granite-3-1-8b-starter-v2 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-granite-3-1-8b-starter-v2-1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-knowledge-adapter-v3 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-mixtral-8x7b-instruct-v0-1 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-prometheus-8x7b-v2-0 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-skills-adapter-v3 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/modelcar-snowflake-arctic-embed-l-v2.0 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/prometheus-8x7b-v2-0 | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) | rhelai1/skills-adapter-v3 | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
No Red Hat products are impacted by this vulnerability as the affected package version is not used.
References (9)
- https://access.redhat.com/security/cve/CVE-2025-2828 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2374398 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18953 Advisory
- https://github.com/advisories/GHSA-h5gc-rm8j-5gpr Advisory
- https://github.com/langchain-ai/langchain/commit/e188d4ecb085d4561a0be3c583d26aa9c2c3283f Patch
- https://github.com/pypa/advisory-database/tree/main/vulns/langchain-community/PYSEC-2025-70.yaml
- https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc exploitThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-2828
- https://www.cve.org/CVERecord?id=CVE-2025-2828
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub