Description
A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson of the file AgenticScopeJsonSerializationIT.java of the component LangChain4j-agentic. This manipulation causes deserialization. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been published and may be used. Upgrading to version 1.5.3-beta11, 1.11.10-beta19 and 1.18.1-beta28 is able to resolve this issue. Upgrading the affected component is advised. The project maintainer kindly explains: "The issue was reported to us privately on 23 July 2026 and fixed in releases published on 29 July 2026. It is tracked as GHSA-gmwr-7wmf-mrjm. Exploitation requires an application to have enabled AgenticScope persistence, which is opt-in, and an attacker who can already write to that store. All maintained release lines have been patched."
Published: 2026-09-25
Score: 2.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability resides in the deserialization logic of the AgenticScopeSerializer.fromJson method within LangChain4j’s agentic module. An attacker can supply a crafted JSON payload that the method deserializes unsafely, enabling the instantiation of arbitrary classes. This flaw aligns with CWE-20 (Improper Input Validation) and CWE-502 (Deserialization of Untrusted Data), and it can lead to remote code execution on the host running the application.

Affected Systems

Affected versions are langchain4j 1.5.3-beta10, 1.11.10-beta18, and 1.18.1-beta27. The vendor is the LangChain4j project. All maintained release lines were patched on 29 July 2026, with fixes appearing in 1.5.3-beta11, 1.11.10-beta19, and 1.18.1-beta28.

Risk and Exploitability

The CVSS score of 2.1 indicates low overall severity, yet the vulnerability allows remote exploitation. The EPSS is not available and the issue is not listed in the CISA KEV catalog. Attack complexity is high and exploitation is difficult, but an exploit has been published. Remote attackers would need the application to have AgenticScope persistence enabled and must already have write access to the persistence store. Given the public exploit and the remote nature of the flaw, organizations should consider the risk significant enough to prioritize remediation.

Generated by OpenCVE AI on September 25, 2026 at 19:55 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade langchain4j to the latest patched releases (1.5.3-beta11 or newer, 1.11.10-beta19 or newer, 1.18.1-beta28 or newer).
  • Disable AgenticScope persistence if the feature is not required, or ensure write access to the persistence store is tightly controlled.
  • Review any custom extensions that rely on deserialization to confirm they are also patched, and validate JSON inputs before passing them to AgenticScopeSerializer.

Generated by OpenCVE AI on September 25, 2026 at 19:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 26 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 25 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Description A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson of the file AgenticScopeJsonSerializationIT.java of the component LangChain4j-agentic. This manipulation causes deserialization. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been published and may be used. Upgrading to version 1.5.3-beta11, 1.11.10-beta19 and 1.18.1-beta28 is able to resolve this issue. Upgrading the affected component is advised. The project maintainer kindly explains: "The issue was reported to us privately on 23 July 2026 and fixed in releases published on 29 July 2026. It is tracked as GHSA-gmwr-7wmf-mrjm. Exploitation requires an application to have enabled AgenticScope persistence, which is opt-in, and an attacker who can already write to that store. All maintained release lines have been patched."
Title langchain4j LangChain4j-agentic AgenticScopeJsonSerializationIT.java AgenticScopeSerializer.fromJson deserialization
First Time appeared Langchain4j
Langchain4j langchain4j
Weaknesses CWE-20
CWE-502
CPEs cpe:2.3:a:langchain4j:langchain4j:*:*:*:*:*:*:*:*
Vendors & Products Langchain4j
Langchain4j langchain4j
References
Metrics cvssV2_0

{'score': 4.3, 'vector': 'AV:N/AC:H/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 4.1, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 2.1, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Langchain4j Langchain4j
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-25T16:37:25.585Z

Reserved: 2026-09-25T08:26:45.370Z

Link: CVE-2026-97869

cve-icon Vulnrichment

Updated: 2026-09-25T16:37:16.963Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-25T16:17:31.740

Modified: 2026-09-28T15:14:01.513

Link: CVE-2026-97869

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T12:00:12Z

Weaknesses
  • CWE-20

    Improper Input Validation

  • CWE-502

    Deserialization of Untrusted Data