LangGraph's SQLite store implementation has a SQL Injection Vulnerability

A SQL injection vulnerability exists in the langchain-ai/langgraph repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: OSV:GHSA-4H97-WPXP-3757...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: GHSA-4H97-WPXP-3757...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2025-8709 Source advisory: OSV:GHSA-4H97-WPXP-3757...

EUVD-2025-35939

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

CVE-2025-8709

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

CVE-2025-8709 SQL Injection in langchain-ai/langchain

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

federate (>=0.9.9, <=0.9.10), freiburg-ris-ca (0.1.0) +7 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=1.0.4, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =1.0.4, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: MEND:CVE-2025-8709...

CVE-2025-8709 SQL Injection in langchain-ai/langchain

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

CVE-2025-8709

CVE-2025-8709 affects langgraph-checkpoint-sqlite 2.0.10 in LangGraph’s SQLite store. The root cause is improper string concatenation of filter keys in _get_filter_condition(), allowing SQL injection via filter parameters and potentially exposing all documents and sensitive fields (e.g., password...

CVE-2025-8709: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

SQLite Operator-Based SQL Injection Vulnerability in LangGraph

This report is not public...

PT-2025-43747

Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-sqlite version 2.0.10 Description A SQL injection vulnerability exists in the LangGraph's SQLite store implementation within the langchain-ai/langgraph repository. The issue stems from improper handling of filter operators...

Malicious code in auth0-langgraph-state-rag-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4726a148bd39bb68771231f6ed71f2edab6932f2f9468e69b5f659528ebb6d4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2298 Malicious code in auth0-langgraph-state-rag-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4726a148bd39bb68771231f6ed71f2edab6932f2f9468e69b5f659528ebb6d4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...