CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTSQLITE-21663386...

Use of Incorrectly-Resolved Name or Reference

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the groupops function in the Postgres and SQLite store backends, due to namespaces...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: GHSA-6HMW-9432-67QQ...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67...

haistings (0.0.2) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-115883...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: MEND:CVE-2026-115883...

PT-2026-122231

Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-postgres versions prior to 3.1.3 langgraph-checkpoint-sqlite versions prior to 3.1.2 Description PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels using ".".joinnamespace, which...

PT-2026-122421

Summary The Postgres and SQLite stores save a namespace as its labels joined with ., so "tenant", "bob" and "tenant.bob", map to the same stored namespace. put rejected labels containing ., but get, search, delete, list namespaces, their async versions, and ops passed directly to batch/abatch did...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-71433...

haistings (0.0.2) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...