Aller au contenu
en Se connecter
6.8 Moyenne

CVE-2026-28277 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and…

Description

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.

Produits et versions touchés

Produit Versions touchées Corrigé en
langgraph 1.0 premières → 1.0.9 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de langgraph

Les 11 CVE de langgraph →
CVE-2026-118667 LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs… 4.3 Moyenne CVE-2026-115885 The LangGraph CLI is the official command-line interface for LangGraph 4.1 Moyenne CVE-2026-115883 LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents 6.0 Moyenne CVE-2026-104873 LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs… 7.6 Élevée
Suivre cette CVE