rewindex

RewindexCVEsLangChain (LangSmith)

CVE-2026-115883: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

Medium · CVSS 6.0 (CVSS 4.0)EPSS 0.30%, 22th percentilePublished Updated Assigner: GitHub_M

Description

LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels with ".".join(namespace), while BaseStore validates labels only for put and aput. Unvalidated dotted labels passed through get, search, delete, list_namespaces, their asynchronous equivalents, or direct batch and abatch operations can resolve to another tenant's stored namespace, allowing cross-namespace reads, overwrites, or deletion. InMemoryStore is not affected because it compares namespace tuples. This issue is fixed in langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2.

CWE-20, CWE-863

Tracked companies

LangChain (LangSmith)

Mapped from the CVE’s affected-product data, NVD CPE matches, vendor advisories or package feeds. A mapping means the vendor’s software is named, not that its hosted service was exposed.

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

langchain-ai: langgraphlangchain-ai: langgraph-checkpoint-postgreslangchain-ai: langgraph-checkpoint-sqlite

References

All CVEsMarkdownJSON