7.3 HighCWE-89
CVE-2025-67644
langchain-ai langgraph vulnerability
langchain-ailanggraph
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
2.3%probability of exploitation in the next 30 days
Higher than 83% of scored CVEs
SeverityCVSS
7.3High
Description NVD
LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers to manipulate SQL queries through metadata filter keys, affecting applications that accept untrusted metadata filter keys (not just filter values) in checkpoint search operations. The _metadata_predicate() function constructs SQL queries by interpolating filter keys directly into f-strings without validation. This issue is fixed in version 3.0.1.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 27 Mar · 09:24 UTC | The Hacker News | LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks |
| Thu 11 Jun · 14:11 UTC | Check Point | Critical LangGraph Checkpointer Bugs Enable Remote Code Execution |
- Critical LangGraph Checkpointer Bugs Enable Remote Code ExecutionCheck Point
- LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI FrameworksThe Hacker News · first in our coverage · mentions it in passing