CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-71433...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

haistings (0.0.2) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

haistings (0.0.2) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: GHSA-47PJ-3JCM-6WHG...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WH...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-71433...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTSQLITE-18592347...

Incorrect Authorization

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Incorrect Authorization in the search or listnamespaces process. An attacker can access data from unintended namespaces by crafting...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentfoundry (1.2.9.1) +31 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=1.0.4, <=3.1.0)

langgraph-checkpoint-sqlite PYPI version =1.0.4, =0.1.0, =0.0.45, =0.1.0a2, =1.1.3, =0.1.0a1, =0.0.19, =0.9.9, =0.1.2, =0.1.2, =0.0.2, =0.0.1, =0.0.2 and more Source cves: CVE-2026-71433 Source advisory: MEND:CVE-2026-71433...

CVE-2026-71433: Exposure of Sensitive Information to an Unauthorized Actor

LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by...