Skip to content
OpenAdvisories

Product · langchain-ai

langgraph

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.6
    CVE-2026-104873

    LangGraph SDK custom auth silently ignores actions= on resource decorators

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assis…

    langchain-ai langgraph langgraph-sdk PyPI
  • High 7.3
    CVE-2025-67644 Public exploit

    LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers…

    langchain-ai langgraph langgraph-checkpoint-sqlite PyPI
  • High 7.4
    CVE-2025-64439

    LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 2.1.2 and below, the JsonPlusSerializer (used as the default serialization protocol for all checkpointing) cont…

    langchain-ai langgraph langgraph-checkpoint PyPI
  • High 7.3
    CVE-2025-64104

    LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concate…

    langchain-ai langgraph langgraph-checkpoint-sqlite PyPI