CVE-2026-105799: @langchain/redis RediSearch Filter Injection Vulnerability
Summary
CVE-2026-105799: LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values. Affects @langchain/redis versions < 1.1.1. Fixed in 1.1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The @langchain/redis package is a library designed for integrating Redis with LangChain, enabling developers to build applications that utilize Redis for data storage and retrieval. This package provides functionalities for structured querying and filtering of data using RediSearch, a powerful search and indexing engine for Redis. However, it has been found to have a vulnerability that allows for improper handling of user input in TAG and TEXT filters, potentially leading to security risks.
Vulnerability Detail
The vulnerability arises from the failure of the @langchain/redis package to properly escape values used in constructing structured RediSearch TAG and TEXT filters. This oversight allows an attacker to inject malicious RediSearch syntax into the filters, which can alter the intended search query. As a result, an attacker could broaden the search results or access documents that should be restricted, posing a significant risk to data confidentiality and integrity.
How To Fix
Latest published version: 1.1.3 as of 23 Oct 2026
npm install @langchain/redis@1.1.3Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.1.1
This is the first release that contains the fix.
npm install @langchain/redis@1.1.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to update to the patched version as soon as possible.
Conclusion
The CVE-2026-105799 vulnerability in the @langchain/redis package poses a significant risk due to improper handling of user input in RediSearch filters. It is crucial for developers using this package to upgrade to version 1.1.1 or later to ensure their applications are secure against potential injection attacks.
See every vulnerability recorded for @langchain/redis →
FAQ
CVE-2026-105799 is a vulnerability in the @langchain/redis package that allows for RediSearch filter injection due to improper escaping of user input.
All versions of @langchain/redis up to and including 1.1.0 are affected by this vulnerability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By analyzing your package-lock.json file, it can alert you to any vulnerabilities, including CVE-2026-105799.
An attacker could exploit this vulnerability to inject malicious queries, potentially exposing sensitive data or altering search results beyond intended access controls.
The recommended approach is to upgrade to the patched version. There are no specific workarounds provided for this vulnerability.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
