Back Cybersecuritynews

Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services

Cybersecuritynews •Abinaya • February 17, 2026

A Server‑Side Request Forgery (SSRF) vulnerability has been identified in the langchain/community package, affecting versions up to 1.1.13. The flaw, tracked as CVE‑2026‑26019, has a moderate severity rating, with a CVSS 3.1 score, due on its potential to expose sensitive cloud metadata and internal infrastructure. The vulnerability originates from the RecursiveUrlLoader class, which performs recursive web crawling. By default, it restricts crawling to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Langchain Community SSRF Vulnerability Exposes Internal Services A Server-Side Request Forgery (SSRF) vulnerability, tracked as CVE-2026-26019, has been discovered in the langchain/community package, affecting versions up to 1.1.13. This flaw has a moderate severity rating and can potentially expose sensitive cloud metadata and internal infrastructure due to its origin in the RecursiveUrlLoader class, which performs recursive web crawling. 4 sources 32

Extracted Entities

Attack Types (1)

Server-Side Request Forgery (ssrf)