Critical LangSmith Vulnerability Enables Complete Account Takeover

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical LangSmith Vulnerability Enables Account Takeover Risk Security researchers have identified a critical vulnerability in LangSmith, tracked as CVE-2026-25750, which exposes users to potential token theft and complete account takeover. LangSmith is a prominent platform for debugging and monitoring large language model data, processing billions of events daily. The vulnerability could allow attackers to exploit user accounts, posing significant risks to enterprise AI environments. As of now, there is no indication that the vulnerability has been actively exploited, but the potential impact on users is severe. Organizations using LangSmith are urged to monitor the situation closely and prepare for potential threats. The vulnerability was published on March 4, 2026, and has garnered immediate attention from security professionals. 2 sources 70