Dec 27, 2025•4 min read
LangChain Serialization Flaw Lets Attackers Steal AI Agent Secrets
CVE-2025-68664 scores CVSS 9.3 and enables secret extraction and prompt injection in LangChain Core. Patch immediately if you're running AI agents.
Marcus Chen