LangChain

LangChain is an open-source framework designed to simplify the development of applications powered by large language models, particularly for complex tasks involving multiple steps, memory, and external data sources. From a governance perspective, it matters because organizations using LangChain need to manage risks around prompt injection, data handling, model accountability, and the orchestration of AI workflows across multiple components. Enterprises deploying LangChain applications must establish clear policies for model selection, API key management, and audit trails to ensure compliance with data protection and AI governance requirements.

1 item

ResearchGlobal2026-08-06

11 Framework Flaws Put Every Agentic App Built on LangChain, AutoGen, and Google ADK at Risk

Check Point Research disclosed 11 vulnerabilities across five major AI agent frameworks, including LangChain, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The flaws include classic bug classes such as insecure deserialization and path traversal embedded in the infrastructure enterprises use to build agentic AI applications. A critical flaw in Microsoft Agent Framework enabled remote code execution triggered through prompt injection, while a Google ADK issue allowed unauthenticated code execution and credential theft on default cloud deployments.

agentic AI AI security prompt injection vulnerability disclosure LangChain Microsoft Agent Framework Google ADK supply chain security