SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72848

HIGH · CVSS 8.6 EPSS 0.48% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the SitemapLoader component in langchain_community, which improperly handles nested sitemap entries, allowing an attacker to exploit this flaw by directing the application to fetch internal addresses despite domain restrictions. This can lead to unauthorized disclosure of sensitive internal data through the returned documents. Organizations utilizing this component should prioritize patching this vulnerability to prevent potential data leaks and protect their internal resources.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-72848
Severity
HIGH
CVSS
8.6
EPSS
0.48%

Original NVD Description

SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_domain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to self.scrape_all([loc.text], "xml"), which reaches WebBaseLoader.scrape_all and an aiohttp GET, with no domain comparison and no check for private, loopback or link-local destinations. An attacker who controls or influences an ingested sitemap can therefore point a nested sitemap entry at an internal address and make the server fetch it even when the deploying application set restrict_to_same_domain to True specifically to confine outbound requests. The fetched content is parsed and surfaces in the returned Documents, so internal responses are disclosed to the caller rather than merely requested.