CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTSQLITE-21663386...

agent-api-server (>=2.1.7, <=2.1.13), alphasix-axiom (>=1.1.3, <=1.1.22) +19 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.2)

langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.13.0.post2, =0.13.0.post2, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =3.1.2 and more Source cves: CVE-2026-115883 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTPOSTGRES-21663385...

Use of Incorrectly-Resolved Name or Reference

Overview langgraph-checkpoint-postgres is a Library with a Postgres implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the groupops function in the Postgres and SQLite store backends, due to namespace...

Use of Incorrectly-Resolved Name or Reference

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the groupops function in the Postgres and SQLite store backends, due to namespaces...

agent-api-server (>=2.1.7, <=2.1.13), alphasix-axiom (>=1.1.3, <=1.1.22) +19 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.2)

langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.13.0.post2, =0.13.0.post2, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =3.1.2 and more Source cves: CVE-2026-115883 Source advisory: GHSA-6HMW-9432-67QQ...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-115883...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

langgraph-agent-toolkit (>=0.7.8, <=0.7.23), mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (2.0.21)

langgraph-checkpoint-postgres PYPI version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - langgraph-agent-toolkit =0.7.8, =0.1.0, =0.1.1 Source cves: CVE-2026-115883 Source advisory:...

gtm-onepint (1.2.14), gtm-onepintai (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (1.0.0)

langgraph-checkpoint-postgres PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - gtm-onepint 1.2.14 - gtm-onepintai =1.0.0, =1.0.9, =1.2.13 Source cves: CVE-2026-115883 Source advisor...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (2.0.0)

langgraph-checkpoint-postgres PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67Q...

airflow-chat (>=0.1.0a2, <=0.1.0a7), doorbeen (0.0.1) +10 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (2.0.25)

langgraph-checkpoint-postgres PYPI version 2.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - airflow-chat =0.1.0a2, =0.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.7.7...

agent-api-server (>=2.1.7, <=2.1.13), alphasix-axiom (>=1.1.3, <=1.1.22) +19 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.2)

langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.13.0.post2, =0.13.0.post2, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =3.1.2 and more Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67...

haistings (0.0.2) potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-115883 Source advisory: OSV:GHSA-6HMW-9432-67QQ...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: GHSA-6HMW-9432-67QQ...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +15 more potentially affected by CVE-2026-115883 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.1)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.1.0, =0.2.0b1, =0.0.1, =2.0.0, =0.1.22, =0.1.61 and more Source cves: CVE-2026-115883 Source advisory: MEND:CVE-2026-115883...