CVE-2026-115883Medium· 6.0▾ SunlitLangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Last analysed / modified upstream
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels with ".".join(namespace), while BaseStore validates labels only for put and aput. Unvalidated dotted labels passed through get, search, delete, list_namespaces, their asynchronous equivalents, or direct batch and abatch operations can resolve to another tenant's stored namespace, allowing cross-namespace reads, overwrites, or deletion. InMemoryStore is not affected because it compares namespace tuples. This issue is fixed in langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2.
langgraph < 1.2.15langgraph-checkpoint-postgres < 3.1.3langgraph-checkpoint-sqlite < 3.1.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
langgraph-checkpoint-postgres < 3.1.3langgraph-checkpoint-sqlite < 3.1.2Patched in:
langgraph-checkpoint-postgres 3.1.3langgraph-checkpoint-sqlite 3.1.2Connected by shared product, vendor, weakness, or advisory.
CVE-2026-104873High· 7.6LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications
CVE-2026-115885Medium· 4.1LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
CVE-2026-55253High· 7.7LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph
CVE-2026-55236Medium· 5.9langgraph-api implements the LangGraph API for rapid development and testing
CVE-2020-37289Low· 3.7Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
CVE-2024-11042Critical· 9.1InvokeAI Arbitrary File Deletion vulnerability