LangChain has a large ecosystem of integrations with various external resources like local and remote file systems, APIs and databases. These integrations allow developers to create versatile applications that combine the power of LLMs with the ability to access, interact with and manipulate external resources.

When building such applications, developers should remember to follow good security practices:

• Limit Permissions: Scope permissions specifically to the application's need. Granting broad or excessive permissions can introduce significant security vulnerabilities. To avoid such vulnerabilities, consider using read-only credentials, disallowing access to sensitive resources, using sandboxing techniques (such as running inside a container), specifying proxy configurations to control external requests, etc., as appropriate for your application.
• Anticipate Potential Misuse: Just as humans can err, so can Large Language Models (LLMs). Always assume that any system access or credentials may be used in any way allowed by the permissions they are assigned. For example, if a pair of database credentials allows deleting data, it's safest to assume that any LLM able to use those credentials may in fact delete data.
• Defense in Depth: No security technique is perfect. Fine-tuning and good chain design can reduce, but not eliminate, the odds that a Large Language Model (LLM) may make a mistake. It's best to combine multiple layered security approaches rather than relying on any single layer of defense to ensure security. For example: use both read-only permissions and sandboxing to ensure that LLMs are only able to access data that is explicitly meant for them to use.

Risks of not doing so include, but are not limited to:

• Data corruption or loss.
• Unauthorized access to confidential information.
• Compromised performance or availability of critical resources.

Example scenarios with mitigation strategies:

• A user may ask an agent with access to the file system to delete files that should not be deleted or read the content of files that contain sensitive information. To mitigate, limit the agent to only use a specific directory and only allow it to read or write files that are safe to read or write. Consider further sandboxing the agent by running it in a container.
• A user may ask an agent with write access to an external API to write malicious data to the API, or delete data from that API. To mitigate, give the agent read-only API keys, or limit it to only use endpoints that are already resistant to such misuse.
• A user may ask an agent with access to a database to drop a table or mutate the schema. To mitigate, scope the credentials to only the tables that the agent needs to access and consider issuing READ-ONLY credentials.

If you're building applications that access external resources like file systems, APIs or databases, consider speaking with your company's security team to determine how to best design and secure your applications.

Please report security vulnerabilities associated with the LangChain open source projects using the following process:

1. Submit a security advisory through GitHub's Security tab in the repository where the vulnerability exists
2. Send an email to [email protected] notifying us that you've filed a security issue and which repository it was filed in

Before reporting a vulnerability, please review the Best Practices above to understand what we consider to be a security vulnerability vs. developer responsibility.

We welcome security vulnerability reports for all LangChain libraries. However, we may offer ad hoc bug bounties only for vulnerabilities in the following packages:

• Core libraries owned and maintained by the LangChain team: langchain-core, langchain (v1), langgraph, and related checkpointer packages (or their JavaScript equivalents)
• Popular integrations maintained by the LangChain team (e.g., langchain-openai, langchain-anthropic, etc., or their JavaScript equivalents)

The vulnerability must be in the library code itself, not in example code or example applications.

We welcome reports for all other LangChain packages and will address valid security concerns, but bug bounties will not be awarded for packages outside this scope. This includes langchain-community, which due to its community-driven nature is not eligible for bug bounties, though we will accept and address reports.

The following are out-of-scope for security vulnerability reports:

• langchain-experimental: This repository is for experimental code and is not in scope for security reports (see package warning).
• Examples and example applications: Example code and demo applications are not in scope for security reports.
• Code documented with security notices: This will be decided on a case-by-case basis, but likely will not be in scope as the code is already documented with guidelines for developers that should be followed for making their application secure.
• LangSmith related repositories or APIs: See Reporting LangSmith Vulnerabilities below.

Please report security vulnerabilities associated with LangSmith by email to [email protected].

• LangSmith site: https://smith.langchain.com
• SDK client: https://github.com/langchain-ai/langsmith-sdk

For any other security concerns, please contact us at [email protected].