Server-Side Request Forgery (SSRF) in LangChain - CVE-2026-41481

Vulnerability details

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to server-side request forgery in HTMLHeaderTextSplitter.split_text_from_url() when following redirect responses during URL fetching. A remote attacker can supply a URL that redirects to an internal, localhost, or cloud metadata endpoint to disclose sensitive information.

User interaction is required because the application must process an attacker-supplied URL, and data exposure depends on the application returning parsed Document contents or derivatives to the requester. Cloud metadata endpoints that require special headers are not reachable through this issue, but headerless endpoints such as AWS IMDSv1 are reachable.

Affected software

How to mitigate CVE-2026-41481

External References

• https://github.com/langchain-ai/langchain/security/advisories/GHSA-fv5p-p927-qmxr

Related Security Bulletins

• Server-Side Request Forgery (SSRF) in LangChain
• IBM Watson Speech Services Cartridge update for LangChain