CVE-2024-8309 | langchain-ai langchain up to 0.2.x GraphCypherQAChain sql injection

A vulnerability was found in langchain-ai langchain up to 0.2.x. It has been classified as critical. Affected is the function GraphCypherQAChain. The manipulation leads to sql injection.

This vulnerability is traded as CVE-2024-8309. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.