CVE-2026-74120

LangChain LCEL Vector Index Deserialization Flaw Enables Arbitrary Code Execution via Compromised Embeddings (CVE-2026-74120)

LangChain issues advisory CVE-2026-74120 for Expression Language vectorstores, patching an unsafe deserialization flaw that allowed remote code execution.