Security Vulnerability: CVE-2025-68664 in Airbyte Connector-Builder-Server

### Topic

connector-builder-server dependency on Python package LangChain is affected by CVE-2025-68664 - serialization injection vulnerability. CVSS 9.3/10.0

### Relevant information

Affected versions: Airbyte 1.8.5 (may be more)

I THINK a practical attack would require authenticated users. So this may impact airbyte with a lower severity than the CVSS suggests.

This vulnerability was disclosed on December 24-25, 2025. It enables:
- Extract sensitive secrets from environment variables
- Instantiate classes with attacker-controlled parameters
- Potentially achieve arbitrary code execution via Jinja2 templates

Implications in Airbyte (theoretical and needs verification)
- Attacker could exploit connector builder functionality to extract credentials
- Malicious connector configurations could trigger deserialization vulnerabilities
- Environment variables containing sensitive Airbyte configuration could be exfiltrated

Action Item:
- Update langchain-core to version 1.2.5 or 0.3.81+
- Release patched version of airbyte

More info:
- GitHub Advisory: https://github.com/advisories/GHSA-c67j-w6g6-q2cm
- NVD Entry: https://nvd.nist.gov/vuln/detail/CVE-2025-68664
- LangChain Patch: https://github.com/langchain-ai/langchain/releases
- Security Research: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/
- Technical Analysis: https://thehackernews.com/2025/12/critical-langchain-core-vulnerability.html

---
**Internal Tracking:** https://github.com/airbytehq/oncall/issues/11117