langchain-ai langgraph/langraph-checkpoint prior 1.2.2 deserialization

Summaryinfo

A vulnerability, which was classified as problematic, has been found in langchain-ai langgraph and langraph-checkpoint. Impacted is an unknown function. This manipulation causes deserialization. This vulnerability is registered as CVE-2026-48775. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in langchain-ai langgraph and langraph-checkpoint. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation with an unknown input leads to a deserialization vulnerability. The CWE definition for the vulnerability is CWE-502. The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond what the application expects, which could in turn result in code execution at checkpoint load time. This is a defense-in-depth issue. The affected behavior is reachable only when checkpoint bytes at rest in the backing store can be modified by an unauthorized party. In most deployments that prerequisite already implies a serious incident; the additional concern is turning "checkpoint-store write access" into code execution in the application runtime. This issue has been fixed in version 4.1.1.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-48775 since 05/22/2026. The exploitation appears to be easy. The attack can only be done within the local network. The exploitation requires an enhanced level of successful authentication. Neither technical details nor an exploit are publicly available.

Upgrading to version 1.2.2 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• langchain-ai

Name

• langgraph
• langraph-checkpoint

Website

• Product: https://github.com/langchain-ai/langgraph/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion