Threats·Cloud & SaaSBreakingLangChain LCEL Vector Index Deserialization Flaw Enables Arbitrary Code Execution via Compromised Embeddings (CVE-2026-74120)LangChain issues advisory CVE-2026-74120 for Expression Language vectorstores, patching an unsafe deserialization flaw that allowed remote code execution.CST Newsroom12 Oct 20268 min read
