CVE-2025-46726 Langroid Vulnerable to XXE Injection via XMLToolMessage
Attackers can exploit XMLToolMessage to cause denial of service or read sensitive local files via XXE injection in Langroid.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-46726?
CVE-2025-46726 is a high-severity vulnerability in langroid, published on 5 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue.
Weakness: CWE-611
Which versions are affected by CVE-2025-46726?
3 open source packages ship an affected version, including langroid. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
langroid PyPI | All versions | 0.53.4 |
langroid PyPI | All versions | 0.53.4 |
langroid PyPI | All versions | 0.53.4 |
Products include Langroid Langroid.
How do I fix CVE-2025-46726?
Upgrade langroid to 0.53.4 or later.
Is CVE-2025-46726 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-46726 exists.
Other vulnerabilities in langroid
Sources
Also known as GHSA-pw95-88fg-3j6f, PYSEC-2026-1532.