AIKIDO-2026-923784
langroid is vulnerable to Improper Link Resolution Before File Access
65
Medium Risk
This Affects:
langroidTL;DR
RepoLoader follows symbolic links when it ingests a repository or local folder, using path checks that resolve link targets and read their contents. A tree that contains symlinks pointing outside the intended root causes those external files to be loaded as documents. Applications that ingest user-supplied repositories or folders can be made to read local host files such as environment files, secrets, and configuration outside the ingestion root. The fix stops following symlinks and keeps resolved paths within the intended root.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use RepoLoader to ingest untrusted repositories or local folders that may contain symlinks.
Background info
langroid is vulnerable to Improper Link Resolution Before File Access in versions 0.0.1 - 0.65.10.
How to fix this
Upgrade the langroid library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant