Skip to content
OpenAdvisories

Product · langchain-ai

langgraph

11 known vulnerabilities.

langgraph at a glance

Last 12 months
9
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 1 vulnerability August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 4 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202640
Sep 202600
Aug 202610
Jul 202610
Jun 202610
May 202600
Apr 202600
Mar 202610
Feb 202600
Jan 202600
Dec 202510
Nov 202510
Oct 202510
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Medium 4.3
    CVE-2026-118667

    LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an af…

    langchain-ai langgraph langgraph-sdk langgraph PyPI
  • Medium 4.1
    CVE-2026-115885

    LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

    The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints comman…

    langchain-ai langgraph langgraph-cli PyPI
  • Medium 6.0
    CVE-2026-115883

    LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

    LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and Async…

    langchain-ai langgraph langgraph-checkpoint-sqlite langgraph-checkpoint-postgres PyPI
  • High 7.6
    CVE-2026-104873

    LangGraph SDK custom auth silently ignores actions= on resource decorators

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assis…

    langchain-ai langgraph langgraph-sdk PyPI
  • Medium 5.3
    CVE-2026-71433

    LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

    LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a …

    langchain-ai langgraph langgraph-checkpoint-sqlite langgraph-checkpoint-postgres PyPI
  • Low 3.1
    CVE-2026-14742

    langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash

    A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file libs/langgraph/langgraph/_internal/_cache.py of the component Task Result Cache. This manipulation of the argument default_cache_key…

    langchain-ai langgraph
  • Medium 6.8
    CVE-2026-48775

    LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under con…

    langchain-ai langgraph langraph-checkpoint langgraph-checkpoint PyPI
  • Medium 6.8
    CVE-2026-28277

    LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects du…

    langchain-ai langgraph langgraph PyPI
  • High 7.3
    CVE-2025-67644 Public exploit

    LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers…

    langchain-ai langgraph langgraph-checkpoint-sqlite PyPI
  • High 7.4
    CVE-2025-64439

    LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 2.1.2 and below, the JsonPlusSerializer (used as the default serialization protocol for all checkpointing) cont…

    langchain-ai langgraph langgraph-checkpoint PyPI
  • High 7.3
    CVE-2025-64104

    LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concate…

    langchain-ai langgraph langgraph-checkpoint-sqlite PyPI