A vulnerability described as critical has been identified in langchain-ai langsmith-sdk. This impacts the function
pull_prompt/pull_prompt_commit. Such manipulation leads to deserialization.
This vulnerability is listed as CVE-2026-45134. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
