CVE-2026-55405
| Severity | 7.6 High CVSS 3.1 |
|---|---|
| Fixed in | 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, 1.16.3-beta26 |
| Weakness | SQL injection (CWE-89) |
| Published | 10 Jul 2026 |
| Updated | 13 Jul 2026 |
Description
LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly into the query without adequate escaping. A crafted metadata key in EmbeddingSearchRequest.filter() can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores' search and removeAll(Filter) operations, enabling blind data exfiltration, denial of service via sleep functions, and deletion of arbitrary rows through removeAll(Filter). This issue is fixed in langchain4j-mariadb and langchain4j-pgvector versions 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26.
Exploitation status
No public exploit
No exploit has been reported in the sources we check.
Exploitation status
- CISA KEV not listed
- VulnCheck KEV not listed
- CISA Vulnrichment exploitation: none
- Indexed PoC none indexed
- EPSS 0.47% chance in 30 days
Waratek protection
Waratek has a rule that blocks attacks on this vulnerability.
- Protection full SQL injection
- Action available security rule
- Review automated Inferred
- Record active
| Decided by | A vulnerability class already blocked by an ARMR security rule |
|---|---|
| Finding | Protected by Waratek's ARMR sql-injection security rule, which blocks this class of attack at the JVM level without a rule written for this CVE specifically. The CVE's weakness is CWE-89: SQL Injection. |
| Candidate fix | https://github.com/langchain4j/langchain4j/commit/13a0698bdfaf105d8aaf0367881df51358596219 : a commit: the change itself |
How to mitigate CVE-2026-55405
Upgrade the affected software to a release that fixes it: 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19 or 1.16.3-beta26. Until you can, Waratek RASP blocks exploitation with its SQL injection rule. It runs inside the Java application, with no code changes.
Waratek RASP Runtime protection for Java applications
Affected software and releases
Maven packages
Affected and fixed versions, from OSV.dev| Package | Introduced | Fixed | Last affected |
|---|---|---|---|
dev.langchain4j:langchain4j-mariadb |
0 | 1.2.1-beta8 |
unbounded |
dev.langchain4j:langchain4j-mariadb |
1.3.0-beta9 | 1.5.1-beta11 |
unbounded |
dev.langchain4j:langchain4j-mariadb |
1.6.0-beta12 | 1.11.8-beta19 |
unbounded |
dev.langchain4j:langchain4j-mariadb |
1.12.1-beta21 | 1.16.3-beta26 |
unbounded |
dev.langchain4j:langchain4j-pgvector |
0 | 1.2.1-beta8 |
unbounded |
dev.langchain4j:langchain4j-pgvector |
1.3.0-beta9 | 1.5.1-beta11 |
unbounded |
dev.langchain4j:langchain4j-pgvector |
1.6.0-beta12 | 1.11.8-beta19 |
unbounded |
dev.langchain4j:langchain4j-pgvector |
1.12.1-beta21 | 1.16.3-beta26 |
unbounded |
Products and versions
2 products, 8 version entries| Source | Vendor | Product | Scheme | Affected versions |
|---|---|---|---|---|
| osv | dev.langchain4j | langchain4j-mariadb | generic | ＜ 1.2.1 · ≥ 1.3.0 and ＜ 1.5.1 · ≥ 1.6.0 and ＜ 1.11.8 · ≥ 1.12.1 and ＜ 1.16.3 |
| osv | dev.langchain4j | langchain4j-pgvector | generic | ＜ 1.2.1 · ≥ 1.3.0 and ＜ 1.5.1 · ≥ 1.6.0 and ＜ 1.11.8 · ≥ 1.12.1 and ＜ 1.16.3 |
References
Timeline
Timeline
| Published | 2026-07-10 | By the CVE Program. |
|---|---|---|
| NVD record modified | 2026-07-13 | NVD's own last-modified date for this record. |