The Wire · Showcase
LangChain ships core 1.6.0 with a security warning tucked inside
By RepoJournal · Filed · About AI Agents
LangChain's newest core release fixes a tool-injection bug, but the fix itself widens the path for arbitrary code execution.
LangChain-core 1.6.0 [1] and the matching openai [2] and anthropic [3] integrations went out overnight, headlined by a fix to `StructuredTool._injected_args_keys` that now resolves postponed annotations [4]. The catch: that fix calls `typing.get_type_hints`, which evaluates string annotations as Python expressions, and the PR warns it "expands the surface area for arbitrary code execution during tool setup" [4]. Treat tool callables as trusted code only. Meanwhile OpenHands polished its automations dashboard [5], added a provider-connections UI that caches shared secrets [6], and scoped the Cmd+Enter build shortcut to plan mode so you stop accidentally triggering builds in chat [7]. Cline fixed @ file mentions breaking on paths with spaces [8] and code actions failing with "command not found" on VS Code 1.134 [9], plus unified Plugins, MCP, and Skills into one hub with a dedicated Marketplace page [10]. LlamaIndex shipped 0.14.24 [11] with fixes for HotpotQA file handles, oversized leaf nodes in CodeSplitter, and multiblock chat history writes. Across 4 repos: 45 commits, 46 PRs, 4 releases. The LangChain security nuance is the thing to watch before you touch tool definitions.
One email a day. Unsubscribe in one click.
Keep up with AI Agents in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Audit all StructuredTool callables for trust before upgrading langchain-core to 1.6.0 langchain-ai/langchain [immediate]
- → Upgrade to cline's latest desktop build to fix @ mentions and code actions on VS Code 1.134 cline/cline [plan]
- → Review OpenHands provider-connections UI before enabling shared credentials OpenHands/OpenHands [monitor]
- → Update to llama-index 0.14.24 to get the parser and evaluator fixes run-llama/llama_index [plan]
References
- [1] langchain-core==1.6.0 ↗ langchain-ai/langchain
- [2] langchain-openai==1.6.0 ↗ langchain-ai/langchain
- [3] langchain-anthropic==1.6.0 ↗ langchain-ai/langchain
- [4] fix(core): resolve postponed annotations in `StructuredTool._injected_args_keys` ↗ langchain-ai/langchain
- [5] feat: polish automations dashboard, recommended rail, and Add/Import flow ↗ OpenHands/OpenHands
- [6] feat: add LLM provider-connections UI (local agent-server) ↗ OpenHands/OpenHands
- [7] fix(chat): scope Cmd+Enter build shortcut to plan mode ↗ OpenHands/OpenHands
- [8] Fix @ file mentions breaking on paths with spaces (#13391) cline/cline
- [9] Fix code actions failing with "command not found" on VS Code 1.134 (#13402) cline/cline
- [10] Desktop: unify Plugins, MCP, and Skills into one Plugins hub with a dedicated Marketplace page (#13411) cline/cline
- [11] v0.14.24 ↗ run-llama/llama_index