langgraph-checkpoint: LangGraph Checkpoint: Remote Code Execution via insecure deserialization in caching layer (CVE-2026-27794)

Overview

A flaw was found in LangGraph Checkpoint. This vulnerability allows a remote attacker with write access to the cache backend to achieve remote code execution. This occurs when applications enable cache backends that inherit from BaseCache and opt nodes into caching via CachePolicy. If msgpack serialization fails, cached values can be deserialized using pickle.loads(...), leading to the execution of arbitrary code. Exploitation requires prior write access to the cache storage layer, making it a post-compromise escalation vector.

Vendor advisories

• Red Hat VEX · Moderate · affected: OpenShift Lightspeed, Red Hat OpenShift AI (RHOAI) · no fix planned: OpenShift Lightspeed, Red Hat OpenShift AI (RHOAI) · updated 2026-10-15 · vex

langgraph-checkpoint: LangGraph Checkpoint: Remote Code Execution via insecure deserialization in caching layer — rated Moderate by Red Hat. Released 2026-02-25, updated 2026-10-15.

Affected:

• OpenShift Lightspeed
• Red Hat OpenShift AI (RHOAI)

No fix planned:

• OpenShift Lightspeed
• Red Hat OpenShift AI (RHOAI)

Remediation

Fix deferred

Package advisory (CVE-2026-27794)

Affected packages:

• langgraph-checkpoint < 4.0.0

Patched in:

• langgraph-checkpoint 4.0.0

Source: https://osv.dev/vulnerability/GHSA-mhr3-j7m5-c7c9