CVE-2025-6984 Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain
Attackers can exploit insecure XML parsing in EverNoteLoader to disclose sensitive local files via XXE attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-6984?
CVE-2025-6984 is a high-severity vulnerability in langchain-ai/langchain, published on 4 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse() without disabling external entity references, which can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data such as /etc/passwd.
Weakness: CWE-200
Which versions are affected by CVE-2025-6984?
3 open source packages ship an affected version, including langchain-community.
| Package | Affected | Fixed in |
|---|---|---|
langchain-community PyPI | All versions | 0.3.27 |
langchain-community PyPI | All versions | 0.3.27 |
langchain-community PyPI | All versions | 0.3.27 |
How do I fix CVE-2025-6984?
Upgrade langchain-community to 0.3.27 or later.
Is CVE-2025-6984 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-6984 exists.
Sources
Also known as GHSA-pc6w-59fv-rh23, PYSEC-2026-1515.