01 Record

CVE-2026-72848

langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

HighPUBLISHEDCNA: VulnCheck

Base score7.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

02 Description

langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

Published

2026-08-20 21:57Z1 DAY AGO

Last updated

2026-08-21 17:35Z8 HR AGO

Reserved

2026-08-10

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

High (CVSS 7.7)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

Weaknesses

SSVC decision

ExploitationpocAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

72a75b6a88519d377750f6db80788e39444979fcfaa7143c3a09d62c96b7f295

VendorProductVersionsPlatforms

langchain-ailangchain-community0 to 0.4.2—