Threat IntelLangChain LCEL Vector Index Deserialization Flaw Enables Arbitrary Code Execution via Compromised Embeddings (CVE-2026-74120)
LangChain issues advisory CVE-2026-74120 for Expression Language vectorstores, patching an unsafe deserialization flaw that allowed remote code execution.
