CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

Use of Incorrectly-Resolved Name or Reference

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the groupops function in the Postgres and SQLite store backends, due to namespaces...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

haistings (0.0.2) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-71433...

Incorrect Authorization

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Incorrect Authorization in the search or listnamespaces process. An attacker can access data from unintended namespaces by crafting...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

haistings (0.0.2) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-71433...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WH...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTSQLITE-18592347...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: GHSA-47PJ-3JCM-6WHG...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentfoundry (1.2.9.1) +31 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=1.0.4, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =1.0.4, =0.1.0, =0.0.45, =0.1.0a2, =1.1.3, =0.1.0a1, =0.0.19, =0.9.9, =0.1.2, =0.1.2, =0.0.2, =0.0.1, =0.0.2 and more Source cves: CVE-2026-71433 Source advisory: MEND:CVE-2026-71433...