CVE-2023-36258

CVE-2023-36258 is a critical arbitrary code execution vulnerability affecting LangChain versions prior to 0.0.236, stemming from the ability to inject Python code utilizing os.system, exec, or eval. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.