CVE-2026-25481: Langroid WAF Bypass Leading to Remote Code Execution
Summary
CVE-2026-25481: Langroid has WAF Bypass Leading to RCE in TableChatAgent. Affects langroid versions < 0.59.32. Fixed in 0.59.32. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langroid is an open-source framework designed for building conversational agents that can interact with tabular data. It leverages advanced language models to facilitate natural language processing tasks. The framework includes various tools and utilities, including the TableChatAgent, which allows users to perform operations on data frames using natural language queries. However, a critical vulnerability has been identified that allows attackers to bypass security measures and execute arbitrary code.
Vulnerability Detail
The vulnerability arises from a flaw in the WAF (Web Application Firewall) implemented in langroid/utils/pandas_utils.py, which was intended to prevent code injection attacks. Specifically, the method _literal_ok() incorrectly returns False instead of raising an UnsafeCommandError for invalid input. This, combined with unrestricted access to dangerous dunder attributes such as init, globals, and builtins, allows an attacker to chain whitelisted DataFrame methods to leak the eval builtin and execute arbitrary code. The consequence of this vulnerability is Remote Code Execution (RCE), enabling attackers to run arbitrary shell commands through controlled user input.
How To Fix
Latest published version: 0.69.13 as of 22 Oct 2026
pip install --upgrade "langroid==0.69.13"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.59.32
This is the first release that contains the fix.
pip install --upgrade "langroid==0.59.32"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the pandas_eval tool in the TableChatAgent until the package is updated. Additionally, ensure that user inputs are sanitized and validated before being processed by the application.
Conclusion
The CVE-2026-25481 vulnerability in the Langroid framework poses a significant risk due to its potential for remote code execution. Users are strongly advised to update to the latest version to mitigate this risk. For those unable to update immediately, implementing workarounds and monitoring for potential exploits is essential.
See every vulnerability recorded for langroid →
FAQ
CVE-2026-25481 is a critical vulnerability in the Langroid framework that allows for WAF bypass and remote code execution.
If your application uses Langroid version 0.59.31 or earlier, it is susceptible to remote code execution attacks, which could compromise your system.
If an immediate update is not possible, refrain from using the pandas_eval tool and ensure that all user inputs are properly sanitized.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 9.4, indicating a critical level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for langroid.
