CVE-2026-54771

Affected versions of the Langroid package are vulnerable to Improper Input Validation due to inadequate sender verification for tool invocation. The `handle_message()` function executes user-supplied tool JSON without checking if the message originated from `Entity.USER` or `Entity.LLM`, bypassing the intended restriction set by `use=False, handle=True`. An attacker can exploit this by sending crafted JSON payloads to directly invoke tools, potentially leading to unauthorized actions such as file manipulation, database queries, or access to internal systems.