LangChain Redis filter injection vulnerability
Start here
A GitHub security advisory disclosed that @langchain/redis does not properly escape values used to construct RediSearch TAG and TEXT structured filters; an attacker who can control the values passed to these filters can inject RediSearch syntax, altering or expanding the scope of search queries. Versions 1.1.0 and earlier are affected; if an application uses attacker-influenced filters as tenant or document access boundaries, index documents outside the intended scope may be exposed. Fixed versions are 1.1.1 and later, with fixes including escaping RediSearch special characters and validating filter values.
Generated by AI from reports · Updated 4 days ago
Progress timeline
- GitHub 安全公告SelectedLangChain fixes RediSearch filter injection vulnerability in @langchain/redis
A GitHub security advisory discloses that @langchain/redis does not properly escape values used to construct RediSearch TAG and TEXT structured filters. An attacker who can control values passed to these filters can inject RediSearch syntax to alter or broaden the scope of search queries. Versions 1.1.0 and earlier are affected; if an application uses attacker-influenced filters as tenant or document access boundaries, indexed documents outside the intended scope may be exposed. The fix is in version 1.1.1 and later, and includes escaping RediSearch special characters, validating field names and structured filter types, and extending these protections to streaming filter constructors and custom schema query construction. The issue was reported by @thesanjok and @shovanchakraborty.
Related discussion
Attention trend
New sources per day
- Oct 6: 1 new sources (1 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)