CVE-2025-64104High· 7.3▾ TwilightLangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
0.2% → 0.2%
LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls. This vulnerability is fixed in 2.0.11.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
langgraph-checkpoint-sqlite < 2.0.11Patched in:
langgraph-checkpoint-sqlite 2.0.11Connected by shared product, vendor, weakness, or advisory.
CVE-2025-8709High· 7.3langchain: SQL Injection in langchain-ai/langchain (CVE-2025-8709)
CVE-2025-67644High· 7.3LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite)
CVE-2023-32785Critical· 9.8Langchain SQL Injection vulnerability
CVE-2022-30765Critical· 9.8SQL injection in calibreweb
CVE-2024-10901Critical· 9.1DB-GPT Arbitrary File Write vulnerability
CVE-2024-10835Critical· 9.1DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users