Server-Side Request Forgery (SSRF) in LangChain - CVE-2026-26013
Published: April 9, 2026
Vulnerability identifier: #VU125667
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-26013
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to server-side request forgery (ssrf) in ChatOpenAI.get_num_tokens_from_messages() when processing messages containing user-supplied image_url values for token counting. A remote attacker can supply a crafted image URL to cause a denial of service.
The issue is blind SSRF, and token counting may occur outside of model invocation such as in logging, metrics, or token budgeting flows.
Affected software
LangChain
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Maximo Application Suite Ai Service
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Maximo Application Suite Ai Service
How to mitigate CVE-2026-26013
Install security update from vendor's website.
LangChain - addressed in versions 0.3.82, 1.2.11
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 5
Maximo Application Suite Ai Service - update to 9.1.16
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 5
Maximo Application Suite Ai Service - update to 9.1.16