CVE-2026-72848 | langchain-ai langchain-community up to 0.4.2 Sitemap Loader sitemap.py SitemapLoader.parse_sitemap server-side request forgery

A vulnerability identified as problematic has been detected in langchain-ai langchain-community up to 0.4.2. This issue affects the function SitemapLoader.parse_sitemap of the file langchain_community/document_loaders/sitemap.py of the component Sitemap Loader. Performing a manipulation results in server-side request forgery. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is cataloged as CVE-2026-72848. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More