Skip to contentLangchain-ai Langgraph-checkpoint vulnerabilities
- langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 moreLangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesCVE-2026-115883Fix available6.0 Medium
- langchain-ai langgraph-checkpoint-mongodb, langgraph-store-mongodb, langchain-mongodb +2 moreLangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposureCVE-2026-55253Fix available7.7 High
- langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 moreLangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite storesCVE-2026-71433Fix available5.3 Medium
- langchain-ai langgraph-checkpointLangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code ExecutionCVE-2026-27794Fix available6.6 Medium