Skip to content
fr Sign in
6.8 Medium

CVE-2026-28277 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and…

Description

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.

Affected products and versions

Product Affected versions Fixed in
langgraph 1.0 earliest → 1.0.9 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of langgraph

The 11 CVEs of langgraph →
CVE-2026-118667 LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs… 4.3 Medium CVE-2026-115885 The LangGraph CLI is the official command-line interface for LangGraph 4.1 Medium CVE-2026-115883 LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents 6.0 Medium CVE-2026-104873 LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs… 7.6 High
Track this CVE