A vulnerability was found in langchain-ai langchain-sdk up to 1.2.0. It has been classified as critical. This impacts an unknown function. The manipulation leads to path traversal.
This vulnerability is documented as CVE-2026-48776. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is recommended.
