---
id: 10273
title: "Achieving remote code execution in LangSmith Playground using unsafe template formatting"
source_domain: lab.ctbb.show
source_url: "https://lab.ctbb.show/research/langsmith-unsafe-formatting-to-rce"
published_at: "2026-01-12T00:00:00Z"
tags: ["rce", "uninitialized-memory", "ctbb", "langsmith"]
phying_url: "https://phying.com/item/10273"
lang: en
---

# Achieving remote code execution in LangSmith Playground using unsafe template formatting

## Summary

This post details the discovery and exploitation of a vulnerability in LangSmith Playground that allowed arbitrary code execution through unsafe template formatting

## Intelligence Metadata

- **Sources:** lab.ctbb.show
- **Published:** 2026-01-12T00:00:00Z
- **Original:** https://lab.ctbb.show/research/langsmith-unsafe-formatting-to-rce
- **Phying News:** https://phying.com/item/10273