CVE-2025-46725

Description

### Summary [LanceDocChatAgent](https://github.com/langroid/langroid/blob/main/langroid/agent/special/lance_doc_chat_agent.py#L158) uses pandas eval() through `compute_from_docs()`: https://github.com/langroid/langroid/blob/18667ec7e971efc242505196f6518eb19a0abc1c/langroid/vector_store/base.py#L136-L150 As a result, an attacker may be able to make the agent run malicious commands through [QueryPlan.dataframe_calc](https://github.com/langroid/langroid/blob/main/langroid/agent/special/lance_tools.py#L16) compromising the host system. ### Fix Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.

How to fix CVE-2025-46725

To remediate CVE-2025-46725, upgrade the affected package to a fixed version below.

• —upgrade to 0.53.15 or later

Is CVE-2025-46725 being exploited?

Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.53.15

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2025-46725
• PATCHgithub.com/langroid/langroid
• WEBgithub.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6
• WEBgithub.com/langroid/langroid/security/advisories/GHSA-22c2-9gwg-mj59