Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection (direct user input or indirect content the agent reads back via RAG), so an attacker who can influence the prompt can read or destroy all graph data and, when APOC or dbms.security procedures a
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:388bcfed0515ae16beba8bd59a6a08d4022c269292372f46914d51eb1a923233
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"langroid","vendor":"langroid","versions":[{"status":"affected","version":"< 0.65.5"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:fe58f0d8e543b5cc11b4aa3d93f3afd209e9514298d0658ba1bd2ef050e6af18 · sha256:36f8944581199315… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":9.2,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:fe58f0d8e543b5cc11b4aa3d93f3afd209e9514298d0658ba1bd2ef050e6af18 · sha256:36f8944581199315… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-74","description":"CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:fe58f0d8e543b5cc11b4aa3d93f3afd209e9514298d0658ba1bd2ef050e6af18 · sha256:36f8944581199315… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"name":"https://github.com/langroid/langroid/commit/5a3097d9dd6378b08ced5480b0caf76cc58d00fa","tags":["x_refsource_MISC"],"url":"https://github.com/langroid/langroid/commit/5a3097d9dd6378b08ced5480b0caf76cc58d00fa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fe58f0d8e543b5cc11b4aa3d93f3afd209e9514298d0658ba1bd2ef050e6af18 · sha256:36f8944581199315… · /containers/cna/references/1
{"tags":["exploit"],"url":"https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fe58f0d8e543b5cc11b4aa3d93f3afd209e9514298d0658ba1bd2ef050e6af18 · sha256:36f8944581199315… · /containers/adp/0/references/0
{"name":"https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc","tags":["x_refsource_CONFIRM"],"url":"https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fe58f0d8e543b5cc11b4aa3d93f3afd209e9514298d0658ba1bd2ef050e6af18 · sha256:36f8944581199315… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer