{"vulnerability": "CVE-2026-25879", "sightings": [{"uuid": "2ba4206b-f69c-4843-9028-ad0e561762cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25879", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq", "content": "", "creation_timestamp": "2026-05-27T00:56:21.000000Z"}, {"uuid": "0a282f15-cbcb-49ea-a8a6-5a167c07c831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25879", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnbfibhj362a", "content": "\ud83d\udd34 CVE-2026-25879 - Critical (9.8)\n\nLangroid is a framework for building large-language-model-powered applications. Prior to version ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-25879/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T01:02:14.193413Z"}, {"uuid": "36ee048c-1d3f-477d-bfb8-ba9f42e2b28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqathrxe3k2q", "content": "CVE-2026-55615 - Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879\nCVE ID : CVE-2026-55615\n \n Published : July 9, 2026, 11:40 p.m. | 8\u00a0minutes a...", "creation_timestamp": "2026-07-09T23:55:24.373653Z"}]}