Back Thehackernews

Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection

Thehackernews •[email protected] (The Hacker News) • December 26, 2025

Modern cyberattacks hide in trusted tools and workflows, evading traditional defenses. Zero Trust and AI-powered cloud security give you the visibility and control to stop these invisible threats early.

Agentic AI is accelerating development—and risk. MCP servers and shadow API keys are spreading fast across IDEs. Learn how to regain visibility, enforce control, and secure agentic AI before speed turns into breach.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical LangChain Vulnerability Enables Secret Exfiltration A critical vulnerability in LangChain’s core library (CVE-2025-68664) was discovered, allowing attackers to exfiltrate sensitive environment variables and potentially execute code through deserialization flaws. The issue, affecting a widely used AI framework with hundreds of millions of downloads, was patched just before Christmas 2025. 6 sources 45

Extracted Entities

Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection

The full story

Extracted Entities

Attack Types (1)

Platforms (2)

Vulnerabilities (1)