CVE-2025-6984: Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Summary
CVE-2025-6984: Langchain Community Vulnerable to XML External Entity (XXE) Attacks. Affects langchain-community versions < 0.3.27. Fixed in 0.3.27. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langchain Community is an open-source library designed to facilitate the development of applications using language models. It provides various components for integrating with different data sources and APIs. One of its components, EverNoteLoader, is responsible for loading data from Evernote. However, it has been found to be vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing practices.
Vulnerability Detail
The vulnerability in the langchain-ai/langchain project arises from the EverNoteLoader component, which utilizes etree.iterparse() without disabling external entity references. This oversight allows attackers to craft malicious XML payloads that can reference local files, potentially leading to sensitive information disclosure, such as exposing the contents of /etc/passwd. The ramifications of this vulnerability are significant, as it can compromise the confidentiality of sensitive data within the system.
How To Fix
Latest published version: 0.4.2 as of 23 Oct 2026
pip install --upgrade "langchain-community==0.4.2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.3.27
This is the first release that contains the fix.
pip install --upgrade "langchain-community==0.3.27"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, if you cannot update the package immediately, consider disabling the use of the EverNoteLoader component until the update can be applied. Additionally, ensure that your application does not process untrusted XML data.
Conclusion
In summary, CVE-2025-6984 poses a significant risk to applications using the langchain-community package due to its vulnerability to XML External Entity (XXE) attacks. It is crucial to update to version 0.3.27 or later to mitigate this risk and protect sensitive information.
See every vulnerability recorded for langchain-community →
FAQ
CVE-2025-6984 is a vulnerability identifier for an XML External Entity (XXE) attack affecting the langchain-community package, specifically its EverNoteLoader component.
If your application uses the affected version of langchain-community, it may be susceptible to attacks that can disclose sensitive information, leading to potential data breaches.
An XXE attack exploits vulnerabilities in XML parsers to access local files or services, potentially exposing sensitive data or allowing further attacks.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring any signup.
The CVSS score for this vulnerability is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for langchain-community.
