A vulnerability described as critical has been identified in langchain-ai langchain up to 2.0.10. This affects an unknown part of the component Filter Operator Handler. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2025-8709. The attack needs to be performed locally. There is not any exploit available.