CVE-2026-25879

Affected versions of the langroid package are vulnerable to SQL Injection leading to Remote Code Execution due to the absence of query validation in the SQLChatAgent component. The run_query method in sql_chat_agent.py executes LLM-generated SQL statements directly against the configured database without parsing or restricting the allowed statement types. An attacker who can influence the agent's input, including indirectly through prompt injection via data returned to the LLM, can coerce execution of dangerous database primitives such as PostgreSQL's COPY FROM PROGRAM to achieve arbitrary command execution on the database host.