LangChain RediSearch Filter Injection Vulnerability

@langchain/redis failed to properly escape values in RediSearch TAG and TEXT filters, allowing attackers to inject RediSearch syntax and alter search queries. This could expose indexed documents outside an attacker's intended scope in applications using these filters as access boundaries.

Disclosed 6 October 2026 · Record updated 6 October 2026

Impact

Attacker-controlled filter values could be used to inject RediSearch syntax and alter or broaden search queries, potentially exposing indexed documents outside intended access boundaries.

Our coverage

A locksmith's hand twists a key inside a safe's mechanism, but the lock's internal pins rearrange themselves, swinging the door open to reveal hidden compartments.

Vulnerabilities

LangChain Redis package patched over search filter injection

A flaw in @langchain/redis let attacker-controlled values rewrite RediSearch queries, potentially exposing documents meant to be out of reach.

6 Oct 2026

Sources

github.comhttps://github.com/advisories/GHSA-5x6v-p487-7qh2